Critical security update for all Exchange Server versions (MS16-108)

Outside of the usual patch interval for Exchange Server, Microsoft has released a security update for all Exchange Server versions, which is intended to fix several security vulnerabilities classified as high or critical. Here is the link to the security bulletin: Microsoft Security Bulletin MS16-108 Brief description of the vulnerability: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe vulnerabilities could allow remote code execution in some of the ... Read more

Group policy for deactivating SSL 3.0 and TLS 1.0 (ADM and ADMX)

Configuring SCHANNEL settings for SSL 3.0 and TLS 1.0, for example, is possible under Windows using the registry. For a larger number of servers or computers, however, group policies are more suitable for configuration, so I have created corresponding templates that make the settings in the registry. Foreword The group policies record changes to the registry ... Read more

Active Directory Rights Management Services (RMS) and Exchange 2016 (Part 3)

In part 1 of this article series, the RMS server was installed and in part 2 the configuration took place. Now the integration into Exchange 2016 follows. As a reminder, the environment from parts 1 and 2 once again: Environment The environment in which the Active Directory rights management services are installed looks as follows: There are a few ... Read more

Active Directory Rights Management Services (RMS) and Exchange Server 2016 (Part 2)

In part 1 of this article series, the RMS server was installed, in part 2 we will now look at the configuration. To remind you of the environment from Part 1: Environment The environment in which the Active Directory rights management services are installed looks like this: There are a few users with Outlook 2016, a domain controller, 3 ... Read more

Active Directory Rights Management Services (RMS) and Exchange 2016 (Part 1)

The Active Directory Rights Management Services (AD RMS) is basically a DRM system. DRM is often used by streaming services to ensure that a piece of music can only be played if there is a corresponding subscription. AD RMS uses a very similar concept, files are provided with a license and encrypted. About ... Read more

Windows 10 Anniversary Update and the PowerShell (Bug)

In this post, I described that my PCs did not receive a Windows 10 Anniversary Update via Windows Update. I had installed the update manually. A mistake, as I have now discovered: https://blogs.msdn.microsoft.com/powershell/2016/08/23/powershell-dsc-broken-in-kb3176932/ Exactly one day after my update, the information was published that the Windows 10 Anniversary Update (1607) had problems with the PowerShell DSC ... Read more

Microsoft releases PowerShell for Linux and MacOS X

Microsoft has also made PowerShell available for Linux and MacOS X on GitHub: https://github.com/PowerShell/PowerShell In addition to a DEB package for Ubuntu and an RPM for CentOS, a package for Mac OS X is also available for download. Microsoft has released PowerShell under the MIT license. The Powershell for Linux is therefore OpenSource. I have ... Read more

Sophos UTM login template for Exchange 2016

In one of the last articles, I already described how to set up reverse authentication for Sophos UTM. The reverse authentication switches a separate login page in front of the Exchange server (similar to Forefront TMG). Unfortunately, the design of the login page of the UTM is not particularly pretty, in my opinion, ... Read more

Sophos UTM and Slack: Connection Trouble

Slack has a sense of humor, or alternatively a pretty poor sense of self-worth. I received the following error message in the browser as well as in the desktop client: Apologies, we're having some trouble with your web socket connection. We've seen this problem clear up with a restart of Slack, a solution which we suggest to you now only with a great regret and ... Read more