New security updates for Exchange Server

Microsoft released new security updates for Exchange Server 2010, 2013, 2016 and 2019 on July 9. The updates address the following vulnerabilities: CVE-2019-1084 | Vulnerability in Microsoft Exchange related to information disclosure CVE-2019-1137 | Vulnerability in Microsoft Exchange Server related to spoofing attacks CVE-2019-1136 | Vulnerability in Microsoft Exchange Server related to privilege escalation All 3 vulnerabilities are ... Read more

QuickTip: NDR after restoring distribution groups or mailboxes

Quick tip on a problem that can occur after a deleted mailbox or distribution group has been restored. Users who send mails to the restored mailbox or distribution list receive an NDR with the following error message: STOREDRV.Deliver.Exception:AccountDisabledException.MapiExceptionMailboxDisabled; Failed to process message due to a permanent exception with message The mailbox /o=FrankysWeb/ou=Exchange Administrative ... Read more

Exchange 2016 DAG: Queue is getting too big (mail.que)

An Exchange 2016 DAG recently encountered the problem that the mail.que, i.e. the Exchange queue, had grown to over 60 GB. If the mail.que had continued to grow, the hard disk would inevitably have filled up, in which case the Exchange server in question would no longer have been able to deliver mails. Also on the other Exchange servers within the DAG ... Read more

New updates for Exchange Server (June 2019)

New Cumulative Updates for Exchange Server 2013, 2016 and 2019 were released today. Click here to go directly to the downloads (the links may not work directly, just try again later): Exchange Server 2019 Cumulative Update 2, VLSC Download Exchange Server 2016 Cumulative Update 13 Exchange Server 2013 Cumulative Update 23 CUs ... Read more

Exchange Server: New security update (June 2019)

Microsoft has released a new security update for all currently supported Exchange Server versions. What exactly the problem is with the Exchange Server versions has not been published. The description of the security advisory only states: Microsoft has released an update for Microsoft Exchange Server that provides enhanced security as a defense in depth measure. ... Read more

Exchange migration: common causes of problems

In January, I already wrote an article about problems with the Outlook connection to Exchange during the migration. In this new article I would now like to mention a few more common causes of problems. DNS server is not a DC During the coexistence of the Exchange servers, it can happen that users cannot transfer mails between the ... Read more

Exchange 2016: Prevent users from changing their AD account

The following e-mail has reached me and if you ask so nicely, I owe you an answer: Dear Frank, I have the following problem: Users in our Exchange organization should not be able to adjust their address book entry themselves. This means editing "Options - General - My account", where they could change e.g. address, telephone number, etc. I have ... Read more

New security updates for Exchange Server (All versions)

Microsoft has released security updates for Exchange Server today. Specifically, these are the following vulnerabilities: CVE-2019-0817: Microsoft Exchange Spoofing Vulnerability CVE-2019-0858: Microsoft Exchange Spoofing Vulnerability CVE-2019-0817 applies to all currently supported Exchange Server versions (including Exchange 2010). CVE-2019-0858 affects Exchange from version 2013 onwards. Even though the vulnerability is "only" rated as "Important", it ... Read more

Exchange Server Dashboards with ELK (ElasticSearch, Logstash, Kibana) Part 3

In part 2 of this article series, I described the installation of the ELK stack on Debian 9.8. This part is about the configuration of the individual components and the data of the Exchange Server message tracking logs. Introduction In this article, the ElasticStack components and the Exchange Server are configured. This article refers directly to ... Read more