EXCHANGE

ExchangeOnlineManagement 3.2.0-Preview2 released

Andres Bohren
Hi All, Yesterday a new Preview Version of the ExchangeOnlineManagement PowerShell Module has been released to the PowerShell Gallery. ExchangeOnlineManagement 3.2.0-Preview2 Check what Module is installed and what’s available from the PowerShell Gallery. Get-InstalledModule ExchangeOnlineManagement Find-Module ExchangeOnlineManagement -AllowPrerelease To install the Module Side by Side you have to use the -Force Parameter Install-Module ExchangeOnlineManagement -AllowPrerelease -Force Get-InstalledModule ExchangeOnlineManagement -AllVersions Make sure the new Module is loaded Import-Module ExchangeOnlineManagement Get-Module If you run “Connect-ExchangeOnline” multiple times you can now Disconnect-ExchangeOnline a specific Connection.

Microsoft Outlook Elevation of Privilege Vulnerability (CVE-2023-23397)

Andres Bohren
Hi All, There is a Outlook Escalation of Privilege Vulnerability in Outlook. Tony Redmond has explained that very well Outlook Elevation of Privilege Vulnerability Leaks Credentials via NTLM Microsoft Outlook Elevation of Privilege Vulnerability Exchange CSS has released a Script to test and mitigate CVE-2023-23397 script Exchange On Prem You need to have an RBAC Admin Role that allows Application Impersonation and assign an Account. If you don’t have that Role you can create it

March 2023 Exchange Server Security Updates

Andres Bohren
Hi All, Today the March 2023 Exchange Server Security Updates have been released. Released: March 2023 Exchange Server Security Updates Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: March 14, 2023 (KB5024296) Security Update For Exchange Server 2016 CU23 SU7 (KB5024296) The downloaded exe File extracts then starts the Installation in a elevated Promt After the Security Update is installed, it is a good idea to restart the Server.

M365 Groups dumped in Outlook for Windows?

Andres Bohren
Hi All, Yesterday i stumbled across something odd. Did not see the M365 Groups in Outlook for Windows anymore. They seem to be gone in the newest Version. Let’s start at the beginning. Office in the Current Channel Outlook Profile is set up with Cached Mode (without Chached Mode you don’t see the M365 Groups either). As you can see the Groups are listed here The cached Files are stored in C:\Users<Username>\AppData\Local\Microsoft\Outlook

M365 Defender for Office 365 User reported Settings

Andres Bohren
Hi All, Do you know the User reported Settings in Microsoft 365 Defender for Office 365? For instance, you can send the Mails that a user reports with the “Report Message” Add-In to Microsoft also to a reporting Mailbox that you own. User reported settings User Reported Settings https://security.microsoft.com/securitysettings/userSubmission I’ve enabled that a while ago. As you can see the Reporting Mailbox receives all types: Junk Phishing Not Junk The Mail contains the Header and the Original Mail as Attachment.

Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.2 released

Andres Bohren
Hi All, A few hours ago a new Version of the Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) Module has been released. ORCA 2.2 To check the installed Module and what’s available on PowerShell Gallery use the commands below Get-InstalledModule ORCA Find-Module ORCA Uninstall the old and install the new PowerShell Module Uninstall-Module ORCA Install-Module ORCA Get-InstalledModule ORCA The Module only contains two Commands Get-Command -Module ORCA Now let’s run the ORCA Report

ExchangeOnlineManagement 3.2.0-Preview1 has been released

Andres Bohren
Hi All, Yesterday, Microsoft has released the ExchangeOnlineManagement 3.2.0-Preview1 PowerShell Module to the PowerShell Gallery. ExchangeOnlineManagement 3.2.0-Preview1 Whats new in v3.2.0-Preview1 : Preview Release of new cmdlets: Updating Briefing Email Settings of a tenant (Get-DefaultTenantBriefingConfig and Set-DefaultTenantBriefingConfig) Updating Viva Insights Feature Settings of a tenant (Get-DefaultTenantMyAnalyticsFeatureConfig and Set-DefaultTenantMyAnalyticsFeatureConfig) Bug fixes in Connect-ExchangeOnline. Let’s check what Version of the Module is installed and what is available from the PowerShell Gallery Get-InstalledModule ExchangeOnlineManagement Find-Module ExchangeOnlineManagement -AllowPrerelease I will install the Preview Side by Side with the Parameter Force

How to check Exchange Active Directory Versions

Andres Bohren
Hi All, Sometimes you need to check the Exchange Active Directory Versions to see if a Schema Upgrade is needet. It is well documented on the Website from Microsoft Exchange Active Directory versions In this Case we use ADSIEdit.msc Or you simply run this Script ############################################################################### # Get Exchange AD Schema Version ############################################################################### #Needs ActiveDirectory PowerShell Module # Exchange Schema Version $sc = (Get-ADRootDSE).SchemaNamingContext $ob = "CN=ms-Exch-Schema-Version-Pt," + $sc Write-Output "RangeUpper: $((Get-ADObject $ob -pr rangeUpper).

Exchange Online Search and Purge with PowerShell and Threat Explorer

Andres Bohren
Hi All, In this Article i’ll show you how you can “Search and Purge” Emails in Exchange Online. With Compliance Search you can search for Mails and purge (Soft- or HardDelete) them afterwards. That’s usually the case for Phishing or Spam Incidents. Your search can cover a maximum of 50'000 Mailboxes A new Compliance Search will create an Alert by default. First of all you need to have the correct Permissions https://security.

February 2023 Exchange Server Security Updates

Andres Bohren
Hi All, Last Night the February 2023 Exchange Server Security Updates have been released. Released: February 2023 Exchange Server Security Updates Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: February 14, 2023 (KB5023038) Security Update For Exchange Server 2016 CU23 SU6 (KB5023038) The downloaded exe File extracts then starts the Installation in a elevated Promt After the Security Update is installed, it is a good idea to restart the Server.