The fallout from the Midnight Blizzard attack against Microsoft continues as Microsoft takes action to harden the security of its own and customer tenants. One step is to retire the EWS Application Impersonation role. This will happen in February 2025 ahead of the retirement of Exchange Web Services in October 2026.
In this episode of the Practical 365 Podcast, Steve and Rich are joined by Becky Cross to discuss Hybrid Identity Migration, new Exchange On-Premises cumulative updates, Azure OpenAI features, and more!
Anecdotal evidence is that some spam originates from onmicrosoft.com domains. These are the domains used by Microsoft 365 tenants and the spam indicates that attackers sign up for 'disposable' tenants to send their malware. This article describes what onmicrosoft.com domains are and how to use a mail flow rule to control their traffic.
If you’re interested in protecting your SharePoint Online, OneDrive for Business, or Exchange Online data, it is useful to understand how Microsoft 365 Backup works and what the software can and cannot do. In this article, Paul Robichaux walks through how to set up and test the preview version of Microsoft 365 Backup.
The tenant block list controls traffic that Exchange Online blocks from different domains. The block list is an important tool but maintaining it can take a lot of time. This article discusses how to automate the process using a combination of SharePoint Online, Exchange Online, and the Microsoft Graph PowerShell SDK.
People have used Outlook's Junk Email Options for years to maintain sets of safe and blocked recipients. The possibility exists that Outlook's safe list might interfere with the processing of email by Exchange Online Protection. This article explores the feasibility of disabling Junk Email Options to use tenant-level blocks instead.
Exchange Online recipient filters calculate the membership of dynamic distribution groups. The filters support email addresses, but they don't work. Another method is needed to create dynamic distribution lists based on user mailbox email addresses, as we describe in this article and script.
The Exchange Mailbox Folder Assistant (MFA) is responsible for processing retention policies against Exchange Server and Exchange Online mailboxes. In this article, we review details of how the MFA works and how administrators can gain an insight into what it does.
The Invoke-HoldRemovalAction cmdlet is available in the compliance module. Its role is to remove obsolete eDiscovery holds from Exchange Online mailboxes and SharePoint Online sites. Old, lingering holds can prevent the removal of objects, so it's good to get rid of them.
Exchange Online keeps message trace data online for 10 days. If you want an email traffic report covering longer periods, you need to retrieve historical message data (for up to 90 days) and report that data. That's the easy description. This article explains some of the complexities involved in generating a 90-day email traffic report for a Microsoft 365 tenant.
In this article, Ingo Gegenwarth shows you how to develop an interface for end-users using Microsoft PowerApps for interacting and rendering data from Exchange Online.
Room mailboxes are a well-known part of Exchange Online. With a little planning, it's easy to add automated bookings for room mailboxes. In this example, we create a room mailbox and configure it to allow salespeople to book customer meetings during a conference.
