Cheat Sheet: Setting Exchange Mailbox User Permissions via PowerShell

One of the things I get asked about quite a lot, is how you can set specific permissions in Exchange Server and Exchange Online. Most cases the Management Console (in 2010) or the Exchange Admin Center (EAC, Exchange 2013 & 2016 and Online) provide most basic permissions like Full Access, Send As and Send On Behalf. However, sometimes an admin has to set Send on Behalf permissions on a Shared Mailbox or disable AutoMapping, those options are not available via

Read more

Yay! Renewed as an Exchange MVP

Today was a nerve racking day (a lot of F5/F9 to refresh my MVP profile page and to see if I got that one mail in Outlook), but eventually I received some good news: Dear Dave Stork, Congratulations! We are pleased to present you with the 2015 Microsoft® MVP Award! This award is given to exceptional technical community leaders who actively share their high quality, real world expertise with others. We appreciate your outstanding contributions in Exchange Server technical communities

Read more

Checking security protocols and ciphers on your Exchange servers

Microsoft states that Exchange 2010 and 2013 are secure out of the box. With this they mean that every traffic coming in and out of Exchange is one way or another encrypted. Whether this is web traffic or specific for SMTP. Even IMAP and POP are enabled with mandatory encryption (although the services are disabled by default). However the past few months we’ve had reports that specific encryption protocols and ciphers (algorithms used for encryption and decryption) used aren’t considered safe

Read more

Tool Tip: RBAC Manager R2 for Exchange

This week I had a session at a customer to customize the default RBAC roles, for instance removing the mobile device remote wipe feature from Recipient Management. Customizing RBAC roles is in most cases not something that is a frequent task, so it can take a while to familiarize and re-familiarize with the concept and all cmdlets. But if your organization does not fit in the default roles, you will have to dig into it. However, I came across a

Read more

A quick look at the Sunrise Calendar app

Now that Microsoft has purchased the Sunrise Calendar app, it’s probably a good idea to take a closer look to that app and see what we are or will be dealing with before everyone panics (again). The Acompli Outlook app for iOS and Android (from now on referenced as just the Outlook app) has received praise regarding it’s functionality and usability, but also a lot of criticism on security and compliancy. A major issue is the temporary caching of data and

Read more

Some things to do after leaving Windows Server 2003 (from an Exchange perspective)

Today the Exchange Team blog posted an article about upgrading the Domain Functional (DFL) level of your Active Directory environment away from Windows Server 2003 and the fact that raising the level might have some impact on your Exchange servers (and other applications). It is possible that they might not be able to authenticate. If you do run into issues after raising the DFL, the solution is either restarting the Kerberos Key Distribution Center service on all DC’s or restarting all DC’s

Read more

No, Windows Phone ActiveSync is not on par with OWA for Devices

Recently I came across this Twitter exchange: @WayneHRiddle You don’t need it for WP. Native app handles all of that functionality. — Ben Rudolph (@BenThePCGuy) January 17, 2015 I’ve heard this argument before, that the Exchange ActiveSync (EAS) implementation in Windows Phone doesn’t require an OWA for Devices app (or MOWA as is the official acronym) like iOS has (for iPad and iPhone) and what is currently in preview for Android. Although the Windows Phone 8 ActiveSync implementation doesn’t have the

Read more

Exchange 2013 CU7, Exchange 2010 SP3 RU8 and Exchange 2007 SP3 RU15 are out!

Update 12 december 2014: The fixed Exchange 2010 SP3 RU8 with v2 is now available. Same location as the plagued v1. Update 10 december 2014: Exchange Server 2010 SP3 RU8 has been pulled due to connectivity issues with Outlook. There is currently not ETA on the fix. Customers are advised to not install this RU8 or remove RU8 if they already installed it. The initial Exchange Team blog post has been amended with this new info. As of now no other

Read more

Mail address sieve and Exchange

During a discussion about fighting spam, a coworker mentioned an interesting Gmail feature. As that service doesn’t provide aliasses, you can’t have a specific mail address alias for your internet services. Some use a different email address for each service they sign up for, a practice which is understandable with some services that (sometimes illegally) opt-in bulk mailings or more nefarious mailings. Whenever a specific alias receives unwanted mails, you can see where it came from and take direct action

Read more

Optimizing the Outlook AutoDiscover process by skipping the root domain query

Updated 8/15/2014: see the bottom of this article for additional information on changed AutoDiscover behavior of Outlook 2013. Consider the following scenario: An Active Directory (AD) domain named equal to the SMTP Suffx, so the mailaddress dmstork@contoso.com in the contoso.com AD domain. No on-premises Exchange, this means that there is no Service Connection Point (SCP) in A. Outlook 2013 (or lower versions from Outlook 2007 up). Exchange Online (or any hosted Exchange for that matter). Additional issue: You’ve got an external

Read more
1 2 3 4 7