February 2022 Blog Posts
Hi All,
Recently there was an Annoucement in the M365 Message Center that announced the depreciation of the Get/Set-PhishFilterPolicy.
Move to the new Commands
Get-TenantAllowBlockListSpoofItems
New-TenantAllowBlockListSpoofItems
Set-TenantAllowBlockListSpoofItems
Remove-TenantAllowBlockListSpoofItems
The Get-PhishFilterPolicy will soon be depreciated
Get-PhishFilterPolicy | ft Sender, SpoofedUser, NumberOfMessages, DecisionSetBy, AllowedToSpoof, SpoofType
To see only the entrys, that are allowed to Spoof
Get-PhishFilterPolicy | where {$_.AllowedToSpoof -eq "Yes"} | ft Sender, SpoofedUser, NumberOfMessages, DecisionSetBy, AllowedToSpoof, SpoofType
Instead use this Command now
Get-TenantAllowBlockListSpoofItems | ft SpoofedUser, SendingInfrastructure, SpoofType, Action
To add a new Entry use this Command
New-TenantAllowBlockListSpoofItems
https://docs.microsoft.com/en-us/powershell/module/exchange/new-tenantallowblocklistspoofitems?view=exchange-ps
New-TenantAllowBlockListSpoofItems -SendingInfrastructure tcgms.net -SpoofedUser sorellhotels.com -SpoofType External -Action Block...
Hi All,
As many of you i use a lot of Copy & Paste when creating Emails.
By default, the Format of the Source will be used - but did you know that you can change that?
These are the default Settings
If you select and copy a few Lines from a Website
This will happen - and you need to use the Paste Context Menu to select "Text only"
I've changed it to "Text only" in the Outlook Options
When i paste now, by default the Text only is pasted
You still can use the Paste Content Menü and select "Keep orginal formating"
Regards
Andres Bohren
Hi All
I have tested the Azure Cost Management anomaly detection Preview.
Public preview: Cost Management anomaly detection for subscriptions
https://azure.microsoft.com/en-us/updates/preview-cost-management-anomaly-detection-for-subscriptions-2/
Regards
Andres Bohren
Hi All,
A few Weeks ago i received the Mail below that was filtered out as Junk-E-Mail.
So i took a closer look as it is legitimate. It contained a "Forgot Password" Link to theyr Portal.
These are classic Phishing Techniques-
I took a look at the Mailheaders with the Message Header Analyzer https://mha.azurewebsites.net/
As you can see the Spam Confidence Level (SCL) is high at 5 and it's classified also as spam (SPM).
The Phishing Message is very high - i expect the "Password Reset" Link was responsible for that.
The Authentication Results are fine: SPF, DKIM and DMARC are all valid.
While looking at...
Hi All,
In this Blog Article i show how you can Export an Azure SQL Database and import it back on your local SQL Server
In the Azure Portal go to your SQL database and hit "Export"
You need to set the Storage Target for your Export
I create a new container at my Storage Account
Once the export starts it takes a while until the Data is exportet
Wait until its completed
Then check your Azure Storage
Now you are able to download the *.bacpac File
If you add *.zip do the *.bacpac File you can see that it is actually a ZIP File that contains the...
Hi All,
In my previous Article i have explained how to install SQL Server 2019 Express Edition. That comes without a Management Interface - therefore we need Install SQL Server Management Studio (SSMS)
Download SQL Server Management Studio (SSMS)
https://docs.microsoft.com/en-us/sql/ssms/download-sql-server-management-studio-ssms?redirectedfrom=MSDN&view=sql-server-ver15
Now it can be found in the Start Menü
You will be welcomed with the Splash Screen
Then you have to Select your SQL DB Instance
Or you can Browse for DB's on your Server or Network
Now you can do SQL Querys against the Database
Regards
Andres Bohren
Hi All,
For a Project, i have installed SQL Server 2019 Express. Here are the Screenshot from the Installation.
Editions and supported features of SQL Server 2019 (15.x)
https://docs.microsoft.com/en-us/sql/sql-server/editions-and-components-of-sql-server-version-15?view=sql-server-ver15
https://www.microsoft.com/de-ch/sql-server/sql-server-downloads
I choose "custom" to see all the Settings
Here is where you would normally choose to place the Data on a diffrent Drive. As this is only a Test System i won't do that.
Let's see if we can connect
sqlcmd /?
sqlcmd -S ICESRV04\SQLEXPRESS -E -Q "Select @@Version"
Regards
Andres Bohren
Hi All,
I was wondering why teams Search shows some SharedMailboxes and some not.
For Example: There are two Shared Mailboxes "SharedForward" and "SharedForwardSMTP" that can be found over Teams Searchbar on Top (does not matter if Teams Web or Teams for Windows).
The fun part is, that you can even send a chat message or call them
On the other hand there is a Shared Mailbox Postmaster - that shows no result when searching
...
Hi All,
I've recently had to deal with Litigation Hold. So i did a bit of research.
Place a mailbox on Litigation Hold
https://docs.microsoft.com/en-us/exchange/policy-and-compliance/holds/litigation-holds?view=exchserver-2019
When a mailbox is placed on Litigation Hold, items in the Purges subfolder are preserved for the hold duration specified by the Litigation Hold. The hold duration is calculated from the original date an item was received or created, and defines how long items in the Purges subfolder are held. When the hold duration expires for an item in the Purges subfolder, the item is marked for permanent deletion and will be purged from Exchange the next time the mailbox...
Hi All,
A few Days ago, Microsoft has released the MicrosoftTeams PowerShell Module v3.2.0 Preview to the PSGallery.
Here are the Release notes https://docs.microsoft.com/en-us/MicrosoftTeams/teams-powershell-release-notes
Find-Module -Name MicrosoftTeams -AllowPrerelease
Install-Module -Name MicrosoftTeams -AllowPrerelease -Force
Let's see how long it takes to load the Module. It's about the same as with the Microsoft Teams PowerShell 3.1.1
Measure-Command -Expression {Import-Module MicrosoftTeams}
Get-Module
My usual Tests
Connect-MicrosoftTeams
Get-Team
Get-CsOnlineUser -Identity a.bohren@icewolf.ch | fl *Ent*, *host*, *voice*, *um*
Regards
Andres Bohren
Hi All,
Microsoft recently announced the Azure AD cross-tenant access settings Preview
Collaborate more securely with new cross-tenant access settings
https://techcommunity.microsoft.com/t5/azure-active-directory-identity/collaborate-more-securely-with-new-cross-tenant-access-settings/ba-p/2147077
Overview: Cross-tenant access with Azure AD External Identities (Preview)
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/cross-tenant-access-overview
The settings can be found in Azure Active Directory > External Identities
If you click on "Default settings" and then edit the defaults you will see the details
I find this one of the most interesting Settings. If you have already done MFA in your home Tenant - i can trust that Setting. Something i would recommend for example.
There is also a Workbook that shows the cross-tenant Activity
This gives you already a good overview...
Hi All,
Seems i did miss, that there was released a new Version of Git for Windows. You can download Git for Windows 2.35.1.
Git Downloads
https://git-scm.com/downloads
Release Notes
https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.35.1.txt
To check the version installed you can use the following PowerShell Commandlet
Get-Package -Name "git"
Regards
Andres Bohren
Hi All,
An Update for ESXi 6.70 has been released by VMware
ESXi670-202102001
https://docs.vmware.com/en/VMware-vSphere/6.7/rn/esxi670-202102001.html
Product Patches
https://customerconnect.vmware.com/patch
I have uploaded the ZIP File to the ESXi Datastore
I have only a Single ESXi Server. So i stop all VM's.
Now the Patch can be installed
esxcli software vib install -d /vmfs/volumes/datastore3/ISO/ESXi670-202201001.zip
After the Update, the Server has to be rebooted. When the Server is up again, you can see the new Version Number 6.7.0.19195723
This time no VMware Tools upgrade is available
Regards
Andres Bohren
Hi All,
This Week, Citrix released a new Version of the Citrix Workspace App for Windows.
Citrix Workspace App 2202 for Windows
https://www.citrix.com/de-de/downloads/workspace-app/windows/workspace-app-for-windows-latest.html
Release Notes
https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/about.html
Regards
Andres Bohren
Hi All,
Yesterday i received a Mail with an update to the Status of VMware Log4j. Finnaly ESXi and vCenter have received patches.
VMSA-2021-0028
https://www.vmware.com/security/advisories/VMSA-2021-0028.html
Product Patches
https://customerconnect.vmware.com/patch
Notice the Version before the Update 6.7.0.51000
The Update can be installed from the VCSA Appliance Management Portal under "Update"
https://vcsa.corp.icewolf.ch:5480/
After the Update you have to be patient until the VCSA and the Appliance Management Portal are available again.
Regards
Andres Bohren
Hi All,
In mid January Microsoft Announced, that the Microsoft Defender for Endpoint Plan 1 will be now Included in M365 E3/A3 Licenses.
Microsoft Defender for Endpoint Plan 1 Now Included in M365 E3/A3 Licenses
https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/microsoft-defender-for-endpoint-plan-1-now-included-in-m365-e3/ba-p/3060639
My Account has a M365 E3 License and i can see "Microsoft Defender for Endpoint Plan 1" has been assigned.
Overview of Microsoft Defender for Endpoint Plan 1
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-plan-1?view=o365-worldwide
I went for the Documentation and Set it up in Micrsosoft Endpoint Manager.
Set up and configure Microsoft Defender for Endpoint Plan 1
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mde-p1-setup-configuration?view=o365-worldwide
I was not sure if i had to choose the Group with the User or the Group with the Computer....
Hi all,
I recently checked some *.exe, *.com and *.dll Files with Notepad.
I did notice, that they all start with the Caracters "MZ"
I found some explanation in Wikipedia
DOS MZ executable
https://en.wikipedia.org/wiki/DOS_MZ_executable
The DOS MZ executable format is the executable file format used for .EXE files in DOS.
The file can be identified by the ASCII string "MZ" (hexadecimal: 4D 5A) at the beginning of the file (the "magic number"). "MZ" are the initials of Mark Zbikowski, one of the leading developers of MS-DOS.
Out of curiousity i have created a TXT File starting with the MZ Characters.
If you try to execute a File starting with...
Hi all,
Yesterday Microsoft has released the MicrosoftTeams PowerShell Module v3.1.1 to the PSGallery.
Here are the Release notes
Get-Module MicrosoftTeams -ListAvailable
Uninstall-Module MicrosoftTeams
Find-Module MicrosoftTeams
Install-Module MicrosoftTeams
Let's see how long it takes to load the Module. I am impressed, it's only 3 Seconds wich feels so good after having to wait for more than 20 Seconds in Previous Versions.
Measure-Command -Expression {Import-Module MicrosoftTeams}
My usual Tests
Get-Team
Get-CsOnlineUser -Identity a.bohren@icewolf.ch | fl *Ent*, *host*, *voice*, *um*
Get/Set-CsUserCallingSettings are still Preview Commands and not included in this GA Version of the PowerShell Module
Get-CsUserCallingSettings
https://docs.microsoft.com/en-us/powershell/module/teams/get-csusercallingsettings?view=teams-ps
Get-Command *CsUserCallingSettings
Regards
Andres Bohren
Hi All,
I've always asked myself, where on Google the Whatsapp Backup will be stored. It's kind of hidden and does not count against the Quota of Google Drive.
Once logged into Google Drive, click on "Speicherplatz". As you can see the 18GB Whatsapp Backup is not counted against the 17 GB Quota of Google Drive.
Then on top right "Sicherungen"
Now you can see your Whatsapp Backup
Regards
Andres Bohren
Hi All,
A new Version of Microsoft PowerToys has been released.
Release Notes can be found here
https://github.com/microsoft/PowerToys/releases/
Regards
Andres Bohren