EXCHANGE

Exchange Online Cross-tenant mailbox migration (preview)

Andres Bohren
Hi All, There is a Preview for M365 Tenant to Tenant Migration of Exchange Mailboxes. I've tested this in my Lab. Took me several Days to complete the Migration or until i understand everything correctly and had everything fixed. Cross-tenant mailbox migration (preview) https://docs.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-mailbox-migration?view=o365-worldwide I've created this Overview to explain it a bit more. Here are all prerequisits to create a Tenant to Tenant (aka Cross-tenant) Mailbox Migration. Target Tenant Azure AD Application Create a new Azure AD App registration

Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.1 released

Andres Bohren
Hi All, A few hours ago a new Version of the Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) Module has been released. ORCA 2.1 https://www.powershellgallery.com/packages/ORCA/2.1 To check the installed Module and what's available on PowerShell Gallery use the commands below Get-InstalledModule ORCA Find-Module ORCA Uninstall the old and install the new PowerShell Module Uninstall-Module ORCA Install-Module ORCA Get-InstalledModule ORCA I connect to Exchange Online (with -UseRPSSession Parameter, because i have already installed the Preview of the Module)

Safe Links Block list have been moved to Tenant Allow Block List (TABL)

Andres Bohren
Hi All, The M365 Defender for Office Safe Links Block list have been moved to Tenant Allow Block List (TABL) If you click on "Global Settings" https://security.microsoft.com/safelinksv2 you can see that the Block List have been Migrated Let's check the Tenant Allow/Block List https://security.microsoft.com/tenantAllowBlockList You can view the TenantAllowBlockList Items with the following Exchange command Get-TenantAllowBlockListItems https://docs.microsoft.com/en-us/powershell/module/exchange/get-tenantallowblocklistitems?view=exchange-ps Get-TenantAllowBlockListItems -ListType URL Get-TenantAllowBlockListItems -ListType URL | where {$_.Notes -match "Migrated"} I came across the "

Defender for Office365 Changes in Anti-Malware Notifications

Andres Bohren
Hi All, There has been a change in the Defender for Office 365 Anti-Malware Policy notifications. Summary: internal and external Notifications are gone and Action is changed only to "Quarantine" or "Reject" (with NDR). Not much to see on the M365 Roadmap But there are more Details in the M365 Admin Portal in Message Center In the M365 Defender Portal you can review the Settings https://security.microsoft.com/antimalwarev2 Internal- and ExternalSendernotifcations are gone.

Microsoft 365 Defender "Restricted Users" now called "Restricted Entities"

Andres Bohren
Hi All, In Microsoft 365 Defender "Restricted Users" now called "Restricted Entities", because it can also detect and create an alarm for a compromised Connector https://security.microsoft.com/restrictedentities Respond to a compromised connector https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/respond-compromised-connector?view=o365-worldwide Regards Andres Bohren

Exchange Cumulative Update Error Expired Certificate

Andres Bohren
Good Morning, I've had a customer that encountered the Error below during Exchange 2016 CU23 installation. Error: The following error was generated when "$error.Clear(); Install-ExchangeCertificate -services IIS -DomainController $RoleDomainController if ($RoleIsDatacenter -ne $true -And $RoleIsPartnerHosted -ne $true) { Install-AuthCertificate -DomainController $RoleDomainController } " was run: "System.Security.Cryptography.CryptographicException: The certificate is expired. at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) at Microsoft.Exchange.Management.SystemConfigurationTasks.InstallExchangeCertificate.InternalProcessRecord() at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1() at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

Calendar Availability (Free/Busy) Requests with Microsoft Graph

Andres Bohren
Hi All, I recently had a customer that wanted to write an Application to read the Availability (Free/Busy) from the Calendars of theyr users.Here is how you can do that with Microsoft Graph. First you need an Application in Azure Active Directory with an AppID / ClientID Then you need to be able to Authenticate. I usually use a Certificate for that purpose. As for the Permissions, the Application needs the following: App needs Application Permissions:

Exchange Online: How to fix the "Get-Place" Error

Andres Bohren
Hi All, Since a few weeks i had a strange behavior with the "Get-Place" command. I knew it has worked before. I did get an Error only on a newly created CloudOnly Mailbox it worked. Get-Mailbox -RecipientTypeDetails RoomMailbox Get-Mailbox -RecipientTypeDetails RoomMailbox | Get-Place With the ExchangeOnlineManagement 2.0.6 Preview6 Module it worked perfectly fine I did open a Microsoft Case and the support guided me to Microsoft Graph GET https://graph.microsoft.com/v1.0/places/microsoft.graph.room To get a specific Mailbox use this URL GET https://graph.

Recipient Management without Exchange Server behind the Scenes

Andres Bohren
Hi All, I was digging a little bit deeper into the Recipient Management without Exchange Server. I've already blogged about it how to install the Managment Tools only fo install the Recipient Management PowerShell Install and use Exchange 2019 CU12 Recipient Management PowerShell https://blog.icewolf.ch/archive/2022/04/27/install-and-use-exchange-2019-cu12-recipient-management-powershell.aspx Add-PSSnapin *RecipientManagement Get-PSSnapin As you can see on the Server the Exchange Server 2019 CU12 is installed (Management Tools only) I found the References of the PowerShell Snapins in the Registry here: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\PowerShellSnapins

Exchange Online Reply-all storm Protection

Andres Bohren
Hi All, A Month ago, Microsoft annouced in the Exchange Team Blog, the New Reply-all Storm Protection Report, Settings UI and new Mail flow Alert Policies. New Reply-all Storm Protection Report, Settings UI, and Alert Policy https://techcommunity.microsoft.com/t5/exchange-team-blog/new-reply-all-storm-protection-report-settings-ui-and-alert/ba-p/3292465 In the new Exchange Admin Center https://admin.exchange.microsoft.com you can find the Reply-all Storm Settings unter Settings > Mail flow These Settings can also be configured by PowerShell. Keep in Mind, that the Minimum Recipients must be between 1000 and 5000.