EXCHANGE

Exchange Online Mailbox Audit Enhancements due Storm-0558

Exchange Online Mailbox Audit Enhancements due Storm-0558

Andres Bohren
Hi All, A few days ago, Microsoft has released an Article on the Techcommunity about the new Standard Logs in Purview audit Increased security visibility through new Standard Logs in Microsoft Purview Audit Back in June 2023 there where many Informations about Microsoft has been hacked by Storm-0558 Analysis of Storm-0558 techniques for unauthorized email access Mitigation for China-based threat actor activity Microsoft mitigates China-based threat actor Storm-0558 targeting of customer email
Install Exchange 2019 on Windows Server 2022

Install Exchange 2019 on Windows Server 2022

Andres Bohren
Hi All, Recently Microsoft has published the - Exchange Server Roadmap Update on the Exchange Team Blog. Changes to support Exchange Server Subscription Edition Removal of support for co-existence with Exchange 2013 Support for new product keys (Hybrid servers which will continue to receive a free license and product key via the Hybrid Configuration Wizard) Support for Windows Server 2025 - CU15 will introduce support for Windows Server 2025 (when the OS reaches GA later this year) Upgrading to Exchange Server SE from Previous Versions
Report Domains used for Mailboxes in ExchangeOnline

Report Domains used for Mailboxes in ExchangeOnline

Andres Bohren
Hi All, Recently i had a Customer that wantet to figure out what Domains are used by his Exchange Online Mailboxes. First we need to figure out, what accepted Domains he owns. That can be archieved, by the following command Connect-ExchangeOnline -ShowBanner:$false Get-AcceptedDomain The Emailadresses are stored in the Attributes EmailAddresses (Array) and PrimarySMTPAddress Get-Mailbox -Identity m.muster@icewolf.ch | fl EmailAddresses, PrimarySMTPAddress Let’s get all Mailboxes and use a Where-Object Filter
ExchangeOnlineManagement 3.5.0 released

ExchangeOnlineManagement 3.5.0 released

Andres Bohren
Hi All, Yesterday, Microsoft has released the ExchangeOnlineManagement 3.5.0 PowerShell Module. PowerShell Gallery ExchangeOnlineManagement 3.5.0 News v3.5.0 : Added new cmdlet Get-VivaFeatureCategory Added support for policy operations at a category level for Viva GFAC (aka. VFAM - Viva Feature Access Management). Added a new return value IsFeatureEnabledByDefault in cmdlet Get-VivaModuleFeaturePolicy. This value informs of the default enablement state for users in the tenant when no tenant or user/group policies have been created.
ExchangeOnlineManagement 3.5.0 - Preview2

ExchangeOnlineManagement 3.5.0 - Preview2

Andres Bohren
Hi All, A few days ago, Microsoft has released the ExchangeOnlineManagement 3.5.0-Preview2 PowerShell Module. PowerShell Gallery ExchangeOnlineManagement 3.5.0-Preview2 News: Since 3.4.1-Preview1 there are two new Dependencies Some new or updated Commands around Viva Commands Wondering why PowerShellGet is required with Version 1.0.0.1 and not the current Version 2.2.5 I am using the new PSResourceGet here instead of the PowerShellGet commands. Show installed Versions and what’s available in PowerShell Gallery Get-InstalledPSResource ExchangeOnlineManagement -Scope CurrentUser Find-PSResource ExchangeOnlineManagement -Prerelease Install Preview Version
Manage M365 DNS Records with PowerShell

Manage M365 DNS Records with PowerShell

Andres Bohren
Hi All, I guess all M365 Admins know how to Manage the M365 Domains in Admin Portal Did you know that you can also manage them via Microsoft.Graph PowerShell Modules? You need to connect with the Scope “Domain.Read.All” or “Domain.ReadWrite.All” MS Learn domain resource type Connect-MgGraph -Scopes Domain.Read.All Admin consent List Domains in M365 Tenant Import-Module Microsoft.Graph.Identity.DirectoryManagement Get-MgDomain List Service Configuration DNS Records for a specific Domain Get-MgDomainServiceConfigurationRecord -DomainId icewolf.ch List details of the MX Record
April 2024 Exchange Server Hotfix Updates

April 2024 Exchange Server Hotfix Updates

Andres Bohren
Hi All, Just a few Hours ago, the Exchange Team has released the long awaitet fix for the March 2024 Exchange Server Security Updates. Anouncement on Exchange Team Blog Released: April 2024 Exchange Server Hotfix Updates Alongside with that came also some new Features Support for ECC certificates in Exchange 2016 and 2019 Hybrid Modern Authentication (HMA) for OWA/ECP Downloads Security Update For Exchange Server 2019 CU13 SU5 (KB5036402) Security Update For Exchange Server 2019 CU14 SU1 (KB5036401) Hotfix Update For Exchange Server 2016 CU23 HU13 (KB5037224) Installation After downloading the *.
Deploy MTA-STS with PS.MTA-STS PowerShell Module

Deploy MTA-STS with PS.MTA-STS PowerShell Module

Andres Bohren
Hi All, I’ve explained how “Mail Transfer Agent Strict Transport Security (MTA-STS)” works in this Article Mail Transfer Agent Strict Transport Security (MTA-STS) PS.MTA-STS A Month ago, the PS.MTA-STS PowerShell Module was announced on the Exchange Team Blog Introducing PS.MTA-STS: a PowerShell module to enhance mail flow security with MTA-STS Today a new Version has been released PowerShell Gallery PS.MTA-STS 1.2.0 I’ve tested the Module back then and contacted Jamy Klotzsche and worked with him to improve the Module on GitHub PS.
Mail Transfer Agent Strict Transport Security (MTA-STS)

Mail Transfer Agent Strict Transport Security (MTA-STS)

Andres Bohren
Hi All, What is MTA-STS Mail Transfer Agent Strict Transport Security (MTA-STS) makes sure that Emails are Transfered over a secured TLS Connection but has lower requirements than DNS based Authentification of Named Entities (DANE). “Mail Transfer Agent Strict Transport Security (MTA-STS)” has been defined in 2018 in the following RFC rfc8461 SMTP MTA Strict Transport Security (MTA-STS) MTA-STS benefits: Emails are transfered over a secure TLS connection Must use TLS-Version 1.
Connectivity Analyzer DANE Vailidation Test

Connectivity Analyzer DANE Vailidation Test

Andres Bohren
Hi All, Somehow i missed that on the Microsoft Remote Connectivity Analyzer there exists a DNSSEC and DANE DNSSEC and DANE Validation Test Simpy enter the Domain of the MX Record You get the same Information with my Get-Mailprotection Script from the PowerShell Gallery I am using the new PSResourceGet here instead of the PowerShellGet commands. Installation of the Script Install-PSResource Get-MailProtection Get Information about a Domain - even more detailed than in the Remote Connectivity Analyzer