SECURITY

Hi All, In my professional Life, i have architected and implemented many Exchange Hybrid Organizations. Most of the Time the MX Records still point to the OnPrem Mailgateway or a 3rd Party Service for AntiMalware, Antispam, AntiPhishing. These Systems have well designed Rules for preventing Malware and unwanted Mails. But customers forget, that with Exchange Online by default comes two MX Records to your Tenant, where someone potentially can bypass all these checks from the OnPrem Mailgateway and deliver Mails directly to Exchange Online Protection (EOP).

Hi All, Just a few days ago, Microsoft has released a new Version of Entra Connect Sync. It’s only downloadable via the Microsoft Entra Admin Center Microsoft Entra Connect: Version release history It’s really hidden: Entra Admin Center > Identity > Hybrid Management > Microsoft Entra Connect > Get started > Manage > Download Connect Sync Agent If you click on the Download Link you have to click on the “Accept terms & download” Button.

Hi All, I’ve released an updated Version of my Conditional Access HTML Export PowerShell Script on my GitHub Repo. It’s always a Pain to document Conditional Access Policies. So i’ve forked and modified the Script from https://github.com/dougsbaker/CA-Export to match my needs. Recently i saw the new “Network” Section in the Conditional Access Policies. I Like when the Sections match the HTML Output Users Target resources Network Conditions Grant Session The Script requires the Microsoft.

Hi All, Yesterday, Microsoft has releasesed the April Hotfix Updates for Exchange Server Released: April 2025 Exchange Server Hotfix Updates Exchange 2019 In my case, i’ve downloaded the Hotfix Update für Exchange Server 2019 CU15 Hotfix Update for Exchange Server 2019 CU15 HU1 (KB5050672) KB5050672 Installation Update has been sucessfully installed Healthchecker Now let’s run the Healthchecker. The First run updates the Healthchecker to the current version .\Healthchecker.ps1 Let’s run that again and see the Results.

Hi All, Since a few days, the Public Beta of the E-ID of the Swiss Governement is accessible and can be used to issue, test and revoke Beta-ID Credentials. First you need the swiyu Wallet App on your Smartphone: Google Play Store Apple iOS App Store Everything has been set up. Now we can request the Beta ID Beta Credential Service The Beta-ID has been set up. Now we can test it: Check a Beta-ID Beta Credential Service

Hi All, I’ve alredy blogged this February about Microsoft Entra Verified ID when it was still in Preview. I’ve also blogged about Entra Verified ID Advanced Setup. In the following MS Learn Site, you can find more Information about Verified employee / Verified ID Verify credentials by using the Microsoft Entra Verified ID Network Microsoft Entra Verified ID now generally available since August 2024 it seems, but there is not much Information and Blogs out there, especially for the Verifiable credentials Admin API.

Hi All, A few Days ago I did read the following Article about DKIM Signing Keys at Heise Online: E-Mails: Experten schleusen Fälschungen mittels geknackter DKIM-Schlüssel ein One of the key Messages is this: The attempt shows that RSA keys with a length of 384, 512 or 768 bits can be cracked with little effort. But 1024-bit DKIM keys are no longer “state of the art” today, but are often still accepted for reasons of compatibility.

Hi All, A few years ago, i did write a Script to warn Entra Application Owners about expiring ClientSecrets and Certificates. PowerShell Script to check for AAD Apps with expiring ClientSecrets and Certificates The Script has been using the AzureAD PowerShell Module. Time to renew it to Microsoft.Graph Entra App Registrations Here is the Code to get the Entra App Registration with Microsoft.Graph PowerShell #Connect to Microsoft.Graph Connect-MgGraph -Scopes Application.Read.All -NoWelcome Let’s have a look at a specific Entra Application

Hi All, Did you notice the following Message Center Message about the Junk-E-Mail Reporting Buttons in Outlook Mobile? Microsoft Outlook for iOS/Android: New reporting buttons integrated with Microsoft Defender for Office 365 Let’s have a look at the Release notes for Outlook Mobile. Look how detailed it is 😂 Built-In Report Buttons The built-in Report button is available in the following versions of Outlook: Outlook for Microsoft 365 version 16.0.17827.15010 or later and Outlook 2021 Version 2407 (Build 17830.

Hi All, Almost a Year ago, I’ve blogged about Microsoft Entra Verified ID Since August 2024 Microsoft Entra Verified ID now generally available Setup Entra Verified ID - Advanced Setup Recently i have been playing around with Entra Verified ID again. This time using Advanced setup. You need to have the “Global Administrator” Role You need to Prepare an Azure Keyvault Step1: Configure organization settings Now let’s dig into the Configuration