Exchange 2016: OPNsense, HAProxy and Let's Encrypt

OPNSense is a fork of the well-known open source firewall PFSense, I personally like OPNSense better, the GUI is tidier, there is a REST api and the most important plug-ins are also available. As there is a plugin for HAProxy and also for Let's Encrypt for OPNSense, I have started testing this combination in conjunction with Exchange 2016. OPNSense ... Read more

Windows 10 Creators Update for Windows Server 2016?

Foreword This article is not meant to be completely serious. However, in my opinion, there are a few inconsistencies with the Windows Update. Creators Update for Windows Server 2016? Nils already published it on Twitter on March 15, Windows Update also offers the Creators Update on a Windows 2016 server: I found this funny and ... Read more

Privileged Access Management Feature: Time-limited group membership

With Windows Server 2016, a new Privileged Access Management feature was introduced, which allows users to be added to a group for a certain period of time only and automatically removed again after this time has expired. This feature is useful if a user is only to be given administrative rights (e.g. Domain Admin) for a certain period of time. A ... Read more

Chrome and Windows Server 2016: ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY

The Chrome browser reports the following error for websites running on an IIS server on Windows Server 2016: ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY In this case, Chrome does not allow the error to be ignored. The problem also occurs with Exchange 2016 servers installed on Windows Server 2016. The problem lies in old cipher suites and ... Read more

Exchange 2010: Using certificates from Let's Encrypt (Part 2)

Part 1 has already covered the preparations for Let's Encrypt certificates and Exchange 2010. This article therefore builds directly on Part 1. In part 1, the Exchange organization was adapted accordingly, so part 2 continues directly with the configuration of the public DNS. I forgot to mention that the ... Read more

Exchange 2010: Using certificates from Let's Encrypt (Part 1)

Certificates from Let's Encrypt are becoming increasingly popular, which is hardly surprising as the certificates are free and there are simple clients to obtain the certificates. Let's Encrypt certificates are only valid for 3 months, but the available clients take care of renewing the certificates. Exchange 2016 can even be managed with a small PowerShell ... Read more

Sophos UTM and Let's Encrypt certificates

I stumbled across an interesting workaround for Sophos UTM and Let's Encrypt certificates today: https://github.com/rklomp/sophos-utm-letsencrypt René has taken the trouble to create a script that can automatically renew Let's Encrypt certificates on Sophos UTM. The implementation is relatively simple and worked right away in my test environment. Since the ... Read more

Exchange Server: New updates (March 2017)

New updates have been released for all Exchange Server versions. Click here to download directly: Exchange Server 2016 CU5 Exchange Server 2013 CU16 Exchange Server 2010 SP3 UR17 Exchange Server 2007 SP3 UR23 Click here for details of the changes: Exchange Server 2016 CU5 Exchange Server 2013 CU16 Exchange Server 2010 SP3 UR17 Exchange ... Read more