This article reviews using advanced message tracking to identify Junk-Mail and Spoof Messages through tools like Exchange Message Trace, Threat Explorer, Message Header Analyzer, and Advanced Hunting.
Join us as we continue the Exchange Online Domain Transfers series, focusing on the strategy phase of a Microsoft 365 domain move project.
RBAC for Applications is a new method to secure Azure AD app access to Exchange Online mailboxes. In this article, we explain how to use Managed Identities in Azure Automation with RBAC for Applications making sure that scripts can only access selected mailboxes.
Security researchers love to report software vulnerabilities that they find. That's their role and it's a valuable contribution to the technical community. However, some of the reports about Microsoft 365 flaws are over-hyped and under-considered, like a recent example covering the risk of phishing in the Exchange Online Direct Send feature.
Microsoft has released the public preview of RBAC for Applications. The new mechanism allows tenants to control the access Azure AD apps have to mailboxes at a granular level. RBAC for Applications will replace application access policies.
This article explains how to use the Microsoft Graph API and PowerShell to extract meeting data from the calendars of room mailboxes to generate statistics about the usage of the rooms. Only confirmed meetings are included in the data.
Even though Exchange migrations are becoming easier, there are still some things to remember when you plan and perform an upgrade to Exchange 2019. Check out this article for some practical advice on upgrading to Exchange 2019.
Outlook groups and shared mailboxes both help small teams work with shared email. The decision as to which to use depends on the exact needs the team has. Microsoft has given Outlook groups some useful enhancements recently, but shared mailboxes are still the most email-friendly choice.
Now that they've disabled basic authentication for email connection protocols, Microsoft is doing the same for the Autodiscover service. This makes sense. There's no point in allowing basic authentication for Autodiscover when clients can't use basic authentication to connect. Microsoft will therefore turn off basic authentication for Autodiscover as it removes basic authentication for protocols like POP3, EAS, IMAP4, EWS, and MAPI.
Microsoft plans to launch a Pay As You Go backup and restore service for Exchange Online and SharePoint Online as part of its Syntex content management suite. This is new ground for Microsoft as they've never offered a backup service for Microsoft 365 before. How will Syntex compare to ISV backup services? Time will tell!
For those wanting to eliminate the SMTP AUTH protocol, Microsoft has three ways to send email using Graph APIs. This article looks at how to use the Send-MgUserMail cmdlet and compares it to the Send-MgUserMessage cmdlet (covered in depth in a previous article). Our conclusion is that you'll probably end up using Send0-MgUserMail because it's easier to use.
The Office 365 audit log is a rich source of forensic information. This article explains how to use Azure Automation to search the log for high-priority events. We use the new support for managed identities in V3.0 of the Exchange Online management PowerShell module to search the audit log and end up sending a nice HTML-format message to administrators.
