EXCHANGE

Change source of authority (SOA) for Exchange Attributes (Preview)

Change source of authority (SOA) for Exchange Attributes (Preview)

Andres Bohren
Hi All, Until now, for a Hybrid Deployment with Entra Connect Sync or Cloud Sync it was required to have an Exchange Server OnPrem or to use Exchange Recipient Management. A few Weeks ago, Microsoft has published an Article with another Option. Introducing Cloud-Managed Remote Mailboxes: a Step to Last Exchange Server Retirement With the Introducion of the “IsExchangeCloudManaged” Attribute, you can change the source of authority (SOA) from an OnPrem Synced Object for the Exchange Attributes (like Emailaddresses, Alias, HideFromAddressList, ExtensionAttributes) from OnPrem to the Cloud.
Exchange Server September 2025 Hotfix Updates

Exchange Server September 2025 Hotfix Updates

Andres Bohren
Hi All, Microsoft has released the Exchange Server Security Updates yesterday for all currently supported Versions: Exchange Server Subscription Edition (SE) Exchange Server 2019 Exchange Server 2016 Exchange Team Blog Article Released: September 2025 Exchange Server Hotfix Updates Hotfix update for Exchange Server Subscription Edition RTM HU2: September 8, 2025 (KB5066373) Online archiving fails for on-premises users in hybrid environment Issues that this hotfix update fixes: ​​​​​​​Online archiving fails for on-premises users in hybrid environment using the dedicated Hybrid App Exchange Server Subscription Edition In my case, i’ve downloaded the Security Update for Exchange Server Subscription Edition
ExchangeOnlineManagement 3.9.0 released

ExchangeOnlineManagement 3.9.0 released

Andres Bohren
Hi All, A few hours ago, Microsoft has released the ExchangeOnlineManagement 3.9.0 PowerShell Module. I don’t know what magic they used, but it was not there yesterday. PowerShell Gallery ExchangeOnlineManagement 3.9.0 v3.9.0: Introduce -EnableSearchOnlySession switch in Connect-IPPSSession cmdlet, which enables certain eDiscovery and related cmdlets that connect to other M365 services I am using the new PSResourceGet here instead of the PowerShellGet commands. Show installed Versions and what’s available in PowerShell Gallery.
Exchange Server August 2025 Security Updates

Exchange Server August 2025 Security Updates

Andres Bohren
Hi All, Microsoft has released the Exchange Server Security Updates yesterday for all currently supported Versions: Exchange Server Subscription Edition (SE) Exchange Server 2019 Exchange Server 2016 Exchange Team Blog Article Released: August 2025 Exchange Server Security Updates Exchange Server Subscription Edition In my case, i’ve downloaded the Security Update for Exchange Server Subscription Edition Security Update for Exchange Server Subscription Edition SU1 (KB5063224) Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 (KB5063224) Installation After the Download i started the *.
New Hybrid Configuration Wizard supports Dedicated Hybrid App

New Hybrid Configuration Wizard supports Dedicated Hybrid App

Andres Bohren
Hi All, Just a few days ago, Microsoft has announced that the updated Hybrid configuration Wizard (HCW) now supports the Configuration of the Dedicated Hybrid App. Dedicated Hybrid App: temporary enforcements, new HCW and possible hybrid functionality disruptions CVE-2025-53786 Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability Microsoft has also announced some block Tests. As the Adoption of Dedicated Hybrid App does not seem at the Level Microsoft is expecting.
ExchangeOnlineManagement 3.9.0-Preview1 released

ExchangeOnlineManagement 3.9.0-Preview1 released

Andres Bohren
Hi All, A few days ago, Microsoft has released the ExchangeOnlineManagement 3.9.0-Preview1 PowerShell Module. PowerShell Gallery ExchangeOnlineManagement 3.9.0-Preview1 v3.9.0-Preview1: Introduce -EnableSearchOnlySession switch in Connect-IPPSSession cmdlet, which enables certain eDiscovery and related cmdlets that connect to other M365 services I am using the new PSResourceGet here instead of the PowerShellGet commands. Show installed Versions and what’s available in PowerShell Gallery. You need to use the -Prerelease Parameter to show Preview Versions of a Module
Get-Mailprotection 1.17 released

Get-Mailprotection 1.17 released

Andres Bohren
Hi All, I’ve found an Issue in my Get-Mailprotection Script and fixed it. The updated Version has been released. PowerShell Gallery Get-Mailprotection 1.17 Release Notes 1.17 Fixed Bug Autodiscover A Record I am using the new PSResourceGet here instead of the PowerShellGet commands. Show installed Versions and what’s available in PowerShell Gallery Get-InstalledPSResource -Name Get-Mailprotection -Scope CurrentUser Find-PSResource -Name Get-Mailprotection Uninstall old Version and install new Version Uninstall-PSResource -Name Get-Mailprotection -Scope CurrentUser Install-PSResource -Name Get-Mailprotection -Scope CurrentUser Get-InstalledPSResource -Name Get-Mailprotection -Scope CurrentUser Use the Script
Exchange Server use ADFS for OWA and ECP

Exchange Server use ADFS for OWA and ECP

Andres Bohren
Hi All, A few days ago, i did publish the Article Installing ADFS on Windows Server 2025. That gave me the opportunity, to test some scenarios with Exchange and Active Directory Federation Services (ADFS). ADFS Server Let’s start the ADFS MMC C:\Windows\ADFS\Microsoft.IdentityServer.msc Create relying party trusts in AD FS for Outlook on the web and the EAC As you can see, the Relying Party Trusts are empty Create Relying Party Trust for Outlook on the Web (owa)
Check for Hybrid Configuration Wizard Updates

Check for Hybrid Configuration Wizard Updates

Andres Bohren
Hi All, A few Months ago, Microsoft has announced the Exchange Hybrid App. They announced that in Q2 2025 the HCW will support the creation of the Exchange Hybrid Application. Not sure if that is already the case. So i did write this Script to check for updated Versions of Hybrid Configuration Wizard (HCW). Exchange Server Security Changes for Hybrid Deployments Browser Developer Tools In the Browser development tools i’ve analyzed the URL that is used to download the Hybrid Configuration Wizard (HCW) when requesting https://aka.
Secure Exchange Online when using CMT or 3rd Party Mailgateway

Secure Exchange Online when using CMT or 3rd Party Mailgateway

Andres Bohren
Hi All, In my professional Life, i have architected and implemented many Exchange Hybrid Organizations. Most of the Time the MX Records still point to the OnPrem Mailgateway or a 3rd Party Service for AntiMalware, Antispam, AntiPhishing. These Systems have well designed Rules for preventing Malware and unwanted Mails. But customers forget, that with Exchange Online by default comes two MX Records to your Tenant, where someone potentially can bypass all these checks from the OnPrem Mailgateway and deliver Mails directly to Exchange Online Protection (EOP).