blog.icewolf.ch

Let's talk about IT!
posts - 2114, comments - 295, trackbacks - 0

My Links

Archives

Post Categories

icewolf

Monday, August 1, 2022

M365 Apps health in M365 Apps admin center

Hi All,

I've tried out M365 Apps health

Microsoft 365 Apps health
https://docs.microsoft.com/en-us/deployoffice/admincenter/microsoft-365-apps-health

You have to go to the M365 Apps Admin Center


I've gone through the "Get started" Wizard




Selected a Group with my Office Devices







I've had to change the Office Channel to "MontlyEnterprise" to get some data

cd C:\Program Files\Common Files\microsoft shared\ClickToRun
OfficeC2RClient.exe /changesetting Channel=MonthlyEnterprise
OfficeC2RClient.exe /update user




After the Change i had to wait for several Hours












What do you think. Is this helpful?

Regards
Andres Bohren


posted @ Monday, August 1, 2022 12:24 PM | Filed Under [ Microsoft365 ]

Blocking *.bin Files in EOP can cause block of Office Documents

Hi All,

I just want to write a short Blog Article about Exhange Online Protection (EOP) Malware Filter regarding the *.bin Attachments.

Just be aware, that when Adding Linked or Embedded Objects in Office Documents (like PowerPoint), the Objects are added as *.bin Objects and might be catched by the Malware Filter.

Import content from other applications into PowerPoint






If you rename the *.pptx or add *.zip at the end you can open in with Windows Explorer or any other ZIP Tool.


As you can see there is a "oleObject1.bin" File in the ppt\embeddings Folder


I have made a Test Anti-Malware Filter policy with just one Recipient addet.


The setting is to Reject a Mail with an NDR


And in the FileTypes there is *.bin


I send now a Mail to that Recipient with the PowerPoint that contains this Embeddet Object.


And i get an NDR


In the Details we can see that this was because of the Attachment and the Malware Filter.



As an Admin you can see that also in the Threat Explorer Details.



Regards
Andres Bohren


posted @ Monday, August 1, 2022 11:39 AM | Filed Under [ Exchange ]

Powered by:
Powered By Subtext Powered By ASP.NET