Office 365 E-Mail forward attack via inboxrules in user mailboxes

NOTE: you can also use the code on exchange onpremises 2010 and aboveA customer called me two weeks ago, that he got the feedback from his customer that he is sending some strange mails. So I had a look at the O365 security and clompliance center. After searching some reports I found out, that every …

Checking exchange schema version with powershell

In my daily work I often see lots of different active directory and exchange environments, so I need a short method to determine witch exchange schema version is installed. Also it is important to check the schema version after schema upgrade or Cumulative Update. Yes there are some links you ‘ll find, but every website …

Get all configured delegations in your active directory (outlook delegations)

Get all configured delegations in your active directory (outlook delegations) Before migrations or other changes, it is always interesting to know which mailboxes are so-called substitutes. To remember where the user can put this:   This information is also written into an AD attribute and can thus be read out via Powershell (easiest way is …

Exchange 2016 Event ID 1025 MSExchangeTransport / SMTP rejected a (P1) mail from Healthmailboxae

Exchange 2016 Event ID 1025 MSExchangeTransport / SMTP rejected a (P1) mail from Healthmailboxae Again and again I see the error 1025 MSExchangeTransport with Exchange servers, which initially has no major effect. The error is part of the active HealthMonitoring of the Exchange server. The server tries to test the presence of mailboxes and other …

Find out all users who have fullaccess on mailboxes inside your exchange organisation

Find out all users who have fullaccess on mailboxes inside your exchange organisation Lot’s of organisations distribute permissions on mailboxes like “fullaccess”. Most of them can’t remember these permissions when their are not written down. Users do not know why they have access and mostly do not report it, so there are permissions on your …