With MTA-STS for More Security in Email Traffic

Several days ago, the BSI published a good article on the topic of email security and modern email infrastructures. https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/BSI-CS/BSI-CS_155.pdf This prompted me to write this article. Since the SMTP protocol was designed in the 1980s and security was not a major concern at that time, we need to continuously develop mechanisms to adapt this …

M365 Defender for Business security recommendations

For some time now, I have been using M365 Defender for Business in my small tenant without Intune Management. This allows small networks to be monitored very well via the cloud. At regular intervals, I also look at the “Security recommendations”. During this routine check, however, I was somewhat shocked. After all, no alerts, which …

Exchange Online get default calendar permissions

I frequently receive requests from customers who are dealing with the default sharing settings within the Exchange organization and don’t have a reasonable solution for it. Therefore, I sat down and wrote a small PowerShell script that can initially read the default permissions of all user mailboxes. In this case, default permissions refer to the …

Reminder: Exchange Online changes EWS default behavior

Already in February, Microsoft announced that the control over EWS access would be slightly changed. This change will be implemented for all tenants starting April 2025. Here is the post from the Exchange team: Access to the EWS interface can be controlled in two ways: first at the organizational level and also at the user …

Exchange 2019 CU15 or 2025 H1 Cumulative Update

Yesterday, Microsoft released the latest and likely final major update for Exchange Server 2019. This update includes a range of new features and bug fixes. As always, remember to use the Exchange HealthChecker. Here direct link for downloading: Exchange 2019 CU15 Let’s start with the list of changes: Note on Extended Protection: It cannot be …