Exchange Server: New security update (June 2019)

Microsoft has released a new security update for all currently supported Exchange Server versions. What exactly the problem is with the Exchange Server versions has not been published. The description of the security advisory only states: Microsoft has released an update for Microsoft Exchange Server that provides enhanced security as a defense in depth measure. ... Read more

Sophos UTM: Export WAF certificate using PowerShell (Exchange version)

In this article, I already described how the Sophos UTM certificate can be exported via REST API. A few people have now reported that an automatic export and import for Exchange Server is interesting. I have therefore extended the script and successfully tested the export and import with Exchange Server 2016. ... Read more

Exchange migration: common causes of problems

In January, I already wrote an article about problems with the Outlook connection to Exchange during the migration. In this new article I would now like to mention a few more common causes of problems. DNS server is not a DC During the coexistence of the Exchange servers, it can happen that users cannot transfer mails between the ... Read more

Exchange 2016: Prevent users from changing their AD account

The following e-mail has reached me and if you ask so nicely, I owe you an answer: Dear Frank, I have the following problem: Users in our Exchange organization should not be able to adjust their address book entry themselves. This means editing "Options - General - My account", where they could change e.g. address, telephone number, etc. I have ... Read more

NET Framework 4.8 released - No support for Exchange Server

Microsoft has recently released .NET Framework 4.8, which will also be delivered promptly via Windows Update. However, .NET Framework 4.8 should not currently be installed on Exchange Servers. Exchange Server only supports certain .NET Framework versions depending on the update status. .NET Framework versions not supported by Exchange cause trouble from time to time (see here and ... Read more

Exchange Server Dashboards with ELK (ElasticSearch, Logstash, Kibana) Part 4

In part 3 of this article series, I described the configuration of the ELK components. If someone has already built the environment up to this point, there should already be some data records from the Exchange Message Tracking Logs in the Elasticsearch instance. Introduction This article is about the creation of a simple Kibana dashboard, which provides initial data ... Read more

New security updates for Exchange Server (All versions)

Microsoft has released security updates for Exchange Server today. Specifically, these are the following vulnerabilities: CVE-2019-0817: Microsoft Exchange Spoofing Vulnerability CVE-2019-0858: Microsoft Exchange Spoofing Vulnerability CVE-2019-0817 applies to all currently supported Exchange Server versions (including Exchange 2010). CVE-2019-0858 affects Exchange from version 2013 onwards. Even though the vulnerability is "only" rated as "Important", it ... Read more

Exchange Server Dashboards with ELK (ElasticSearch, Logstash, Kibana) Part 3

In part 2 of this article series, I described the installation of the ELK stack on Debian 9.8. This part is about the configuration of the individual components and the data of the Exchange Server message tracking logs. Introduction In this article, the ElasticStack components and the Exchange Server are configured. This article refers directly to ... Read more

Exchange Server Dashboards with ELK (Elasticsearch, Logstash, Kibana) Part 2

As already announced, I would like to realize dashboards for Exchange Server with Elasticsearch, more precisely, the Elastic Stack (ELK). This part is about the installation of the Elastic Stack on a Debian 9.8 VM. Introduction I have described the installation and configuration in this article so that the environment can be recreated if you are interested. When I ... Read more