Managing email addresses in Exchange Online despite hybrid status

On August 20th, the Exchange team published a post that should give many admins and consultants a sigh of relief. It’s now finally possible (for what feels like an eternity) to change Exchange attributes, such as user email addresses, in the cloud. These changes are then even written back to the local AD using Entra …

With MTA-STS for More Security in Email Traffic

Several days ago, the BSI published a good article on the topic of email security and modern email infrastructures. https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/BSI-CS/BSI-CS_155.pdf This prompted me to write this article. Since the SMTP protocol was designed in the 1980s and security was not a major concern at that time, we need to continuously develop mechanisms to adapt this …

Exchange Online get default calendar permissions

I frequently receive requests from customers who are dealing with the default sharing settings within the Exchange organization and don’t have a reasonable solution for it. Therefore, I sat down and wrote a small PowerShell script that can initially read the default permissions of all user mailboxes. In this case, default permissions refer to the …

M365 Monitor action in Safe attachments policy will retire

Microsoft recently announced in the M365 Administration Center notifications that they will be making some adjustments to the paid feature “Safe Attachments.” Specifically, the “Monitor” function will no longer be available. All rules with “Monitor” will be switched to “BLOCK” in February 2025. See Microsoft’s notification for more details: Microsoft Exchange Online Protection (Defender for …

No more password sending via email in M365

A long-overdue decision is finally being implemented. Microsoft has announced that starting from August 30, 2024, they will no longer send passwords for newly created users via email. This feature will be completely discontinued and will no longer be available. I say ‘Very good’. I find the note ‘Admins should use the ‘Print’ option to …