Hi All, There is a Preview for M365 Tenant to Tenant Migration of Exchange Mailboxes. I've tested this in my Lab. Took me several Days to complete the Migration or until i understand everything correctly and had everything fixed.
Cross-tenant mailbox migration (preview)
https://docs.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-mailbox-migration?view=o365-worldwide I've created this Overview to explain it a bit more. Here are all prerequisits to create a Tenant to Tenant (aka Cross-tenant) Mailbox Migration.
Target Tenant Azure AD Application Create a new Azure AD App registration
Hi All, A few hours ago a new Version of the Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) Module has been released. ORCA 2.1
https://www.powershellgallery.com/packages/ORCA/2.1
To check the installed Module and what's available on PowerShell Gallery use the commands below
Get-InstalledModule ORCA Find-Module ORCA
Uninstall the old and install the new PowerShell Module
Uninstall-Module ORCA Install-Module ORCA Get-InstalledModule ORCA
I connect to Exchange Online (with -UseRPSSession Parameter, because i have already installed the Preview of the Module)
Hi All, The M365 Defender for Office Safe Links Block list have been moved to Tenant Allow Block List (TABL) If you click on "Global Settings"
https://security.microsoft.com/safelinksv2
you can see that the Block List have been Migrated
Let's check the Tenant Allow/Block List https://security.microsoft.com/tenantAllowBlockList
You can view the TenantAllowBlockList Items with the following Exchange command
Get-TenantAllowBlockListItems
https://docs.microsoft.com/en-us/powershell/module/exchange/get-tenantallowblocklistitems?view=exchange-ps
Get-TenantAllowBlockListItems -ListType URL Get-TenantAllowBlockListItems -ListType URL | where {$_.Notes -match "Migrated"}
I came across the "
Hi All, There has been a change in the Defender for Office 365 Anti-Malware Policy notifications. Summary: internal and external Notifications are gone and Action is changed only to "Quarantine" or "Reject" (with NDR).
Not much to see on the M365 Roadmap But there are more Details in the M365 Admin Portal in Message Center
In the M365 Defender Portal you can review the Settings
https://security.microsoft.com/antimalwarev2 Internal- and ExternalSendernotifcations are gone.
Hi All, In Microsoft 365 Defender "Restricted Users" now called "Restricted Entities", because it can also detect and create an alarm for a compromised Connector
https://security.microsoft.com/restrictedentities Respond to a compromised connector
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/respond-compromised-connector?view=o365-worldwide
Regards Andres Bohren
Good Morning, I've had a customer that encountered the Error below during Exchange 2016 CU23 installation.
Error:
The following error was generated when "$error.Clear();
Install-ExchangeCertificate -services IIS -DomainController $RoleDomainController
if ($RoleIsDatacenter -ne $true -And $RoleIsPartnerHosted -ne $true)
{
Install-AuthCertificate -DomainController $RoleDomainController
}
" was run: "System.Security.Cryptography.CryptographicException: The certificate is expired.
at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
at Microsoft.Exchange.Management.SystemConfigurationTasks.InstallExchangeCertificate.InternalProcessRecord()
at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1()
at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".
Hi All, I recently had a customer that wanted to write an Application to read the Availability (Free/Busy) from the Calendars of theyr users.Here is how you can do that with Microsoft Graph. First you need an Application in Azure Active Directory with an AppID / ClientID
Then you need to be able to Authenticate. I usually use a Certificate for that purpose.
As for the Permissions, the Application needs the following: App needs Application Permissions:
Hi All, Since a few weeks i had a strange behavior with the "Get-Place" command. I knew it has worked before.
I did get an Error only on a newly created CloudOnly Mailbox it worked. Get-Mailbox -RecipientTypeDetails RoomMailbox Get-Mailbox -RecipientTypeDetails RoomMailbox | Get-Place
With the ExchangeOnlineManagement 2.0.6 Preview6 Module it worked perfectly fine
I did open a Microsoft Case and the support guided me to Microsoft Graph GET https://graph.microsoft.com/v1.0/places/microsoft.graph.room To get a specific Mailbox use this URL GET https://graph.
Hi All, I was digging a little bit deeper into the Recipient Management without Exchange Server. I've already blogged about it how to install the Managment Tools only fo install the Recipient Management PowerShell
Install and use Exchange 2019 CU12 Recipient Management PowerShell
https://blog.icewolf.ch/archive/2022/04/27/install-and-use-exchange-2019-cu12-recipient-management-powershell.aspx
Add-PSSnapin *RecipientManagement Get-PSSnapin As you can see on the Server the Exchange Server 2019 CU12 is installed (Management Tools only)
I found the References of the PowerShell Snapins in the Registry here: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\PowerShellSnapins
Hi All, A Month ago, Microsoft annouced in the Exchange Team Blog, the New Reply-all Storm Protection Report, Settings UI and new Mail flow Alert Policies.
New Reply-all Storm Protection Report, Settings UI, and Alert Policy
https://techcommunity.microsoft.com/t5/exchange-team-blog/new-reply-all-storm-protection-report-settings-ui-and-alert/ba-p/3292465 In the new Exchange Admin Center https://admin.exchange.microsoft.com you can find the Reply-all Storm Settings unter Settings > Mail flow
These Settings can also be configured by PowerShell. Keep in Mind, that the Minimum Recipients must be between 1000 and 5000.