Security researchers love to report software vulnerabilities that they find. That's their role and it's a valuable contribution to the technical community. However, some of the reports about Microsoft 365 flaws are over-hyped and under-considered, like a recent example covering the risk of phishing in the Exchange Online Direct Send feature.
Microsoft has released the public preview of RBAC for Applications. The new mechanism allows tenants to control the access Azure AD apps have to mailboxes at a granular level. RBAC for Applications will replace application access policies.
This article explains how to use the Microsoft Graph API and PowerShell to extract meeting data from the calendars of room mailboxes to generate statistics about the usage of the rooms. Only confirmed meetings are included in the data.
Even though Exchange migrations are becoming easier, there are still some things to remember when you plan and perform an upgrade to Exchange 2019. Check out this article for some practical advice on upgrading to Exchange 2019.
Outlook groups and shared mailboxes both help small teams work with shared email. The decision as to which to use depends on the exact needs the team has. Microsoft has given Outlook groups some useful enhancements recently, but shared mailboxes are still the most email-friendly choice.
Now that they've disabled basic authentication for email connection protocols, Microsoft is doing the same for the Autodiscover service. This makes sense. There's no point in allowing basic authentication for Autodiscover when clients can't use basic authentication to connect. Microsoft will therefore turn off basic authentication for Autodiscover as it removes basic authentication for protocols like POP3, EAS, IMAP4, EWS, and MAPI.
Microsoft plans to launch a Pay As You Go backup and restore service for Exchange Online and SharePoint Online as part of its Syntex content management suite. This is new ground for Microsoft as they've never offered a backup service for Microsoft 365 before. How will Syntex compare to ISV backup services? Time will tell!
For those wanting to eliminate the SMTP AUTH protocol, Microsoft has three ways to send email using Graph APIs. This article looks at how to use the Send-MgUserMail cmdlet and compares it to the Send-MgUserMessage cmdlet (covered in depth in a previous article). Our conclusion is that you'll probably end up using Send0-MgUserMail because it's easier to use.
The Office 365 audit log is a rich source of forensic information. This article explains how to use Azure Automation to search the log for high-priority events. We use the new support for managed identities in V3.0 of the Exchange Online management PowerShell module to search the audit log and end up sending a nice HTML-format message to administrators.
Everyone likes reports. Well, here's a PowerShell script to create a report of Exchange Online mailbox content. The script uses the Graph API to list every item more than a year old (you can remove the filter if you like) and creates an Excel workbook containing the data. What you do with the information afterwards is up to you!
What happened at TEC & MEC? Paul gives us the low-down First up this week, Paul and I chat about TEC – and how valuable it was to attend for him; and we contrast that to Microsoft conferences like Ignite. Paul talks about how TEC provides deep, real-world expertise and having expanded from technologies like […]
Outlook mobile is Microsoft's preferred option for a mobile email client for Exchange Online. However, many still use Exchange ActiveSync (EAS)-based clients like the native iOS mail app. What's the best choice? :Like many things, it all depemds/
