Microsoft Exchange and Active Directory Blog
Especially in larger and above all older Active Directory environments, a large number of authorizations and delegations accumulate over time. These often include authorizations with orphaned SIDs, for example if the user has already been deleted but the ACL still exists. Many people are familiar with these orphaned SIDs from file servers and their authorization structure. In order to ... Read more
Sophos has released a new update for UTM 9.6. The update raises the version of the UTM to 9.602-3. The following issues are fixed with the update: [NUTM-9877]: [Access & Identity] Configurable RADIUS timeout for L2TP over IPsec [NUTM-10728]: [Access & Identity] Race condition on configuration change of RED device [NUTM-10190]: [Basesystem] CVE-2018-15473: OpenSSH ... Read more
Attractive dashboards can be created with many different applications, such as Kibana and Grafana. However, dashboards can also be created directly with PowerShell. Ironman Software offers the "Powershell Universal Dashboard" module for this purpose. The Community Edition can be used free of charge and has only a few restrictions compared to the Enterprise Edition. Here is an overview ... Read more
Microsoft has recently released .NET Framework 4.8, which will also be delivered promptly via Windows Update. However, .NET Framework 4.8 should not currently be installed on Exchange Servers. Exchange Server only supports certain .NET Framework versions depending on the update status. .NET Framework versions not supported by Exchange cause trouble from time to time (see here and ... Read more
In part 3 of this article series, I described the configuration of the ELK components. If someone has already built the environment up to this point, there should already be some data records from the Exchange Message Tracking Logs in the Elasticsearch instance. Introduction This article is about the creation of a simple Kibana dashboard, which provides initial data ... Read more
Microsoft has released security updates for Exchange Server today. Specifically, these are the following vulnerabilities: CVE-2019-0817: Microsoft Exchange Spoofing Vulnerability CVE-2019-0858: Microsoft Exchange Spoofing Vulnerability CVE-2019-0817 applies to all currently supported Exchange Server versions (including Exchange 2010). CVE-2019-0858 affects Exchange from version 2013 onwards. Even though the vulnerability is "only" rated as "Important", it ... Read more
I am currently receiving many emails about the upcoming end of support for Exchange 2010. As you know, support for Exchange 2010 ends on 14.01.2020. Apparently, smaller companies in particular, which are currently still using Small Business Server, are currently having problems finding a service provider or system house to assist with the migration. I have now read several times that the cloud ... Read more
The Microsoft Office 365 Developer Program is not new, but perhaps some of you are not yet familiar with it. So if you want to try out Office 365, or even develop your own applications for or with Office 365, the Developer Program gives you 25 E3 plans for 90 days free of charge (see note at the end of the ... Read more
Sophos UTM 9.6 Webserver Protection (WAF) can now forward WebSocket connections to the Real Server. This means that web applications that require WebSocket for the function now work in connection with the UTM WAF. One of these applications is, for example, the Windows Admin Center, but the UniFi SDN Controller also uses WebSockets for certain features. Although ... Read more
Since the last article on Sophos UTM Webserver Protection and Exchange was written a few days ago, I have decided to update the howto. The last article referred to UTM 9.4 and is now almost 3 years old. Therefore there is now a new article with the UTM in ... Read more
