An interesting and worthwhile interview (available on YouTube) with security researcher Amit Serper reveals a lot more detail about the Autodiscover credential leak reported by Guardicore last month. The interview (with three Office 365 MVPs) goes through the collection of leaked credentials, how Serper tried to reproduce the problem, and his interaction with Microsoft. It’s a real pity Serper didn’t include the information in his original report as it would have taken a lot of heat out of the situation.
Microsoft's Greg Taylor joins MVPs Steve Goodman and Paul Robichaux to discuss the demise of Basic Authentication (AKA Legacy Auth) in Exchange Online.
Yes - one of the core ways someone can exploit your tenant - but you might need it enabled thanks to a pesky vendor's app - will be gone. What do you need to do to prepare? What happens if you do nothing? We find that out, plus much more...
So, you’ve completed your migration to Exchange Online. Email flows smoothly into and out of the cloud, and all your mailboxes are now online. What’s next for your Exchange Servers, now that you’ve made the transition?
After completion you will have several tasks to perform to remove Exchange Servers from your environment, but there is one important caveat you need to know about; if you run Azure AD Connect then you can’t remove every Exchange Server from your environment. You will need to keep at least one around for management purposes. In this article, I’ll walk through what you can do to minimise what you keep and need to maintain, and what you can consider planning for in the future. You can also join me at TEC this week, on September 2nd.
After a false start in 2020, Microsoft is coming back with version 2 of the Teams Advanced Communications add-on. The documentation lists four new capabilities. You’ll have to make your mind up whether these features are worth whatever Microsoft asks for in terms of add-on pricing. We probably won’t have that information until the preview phase of the features terminates at the end of 2021. I can’t wait!Read More
In the show this week – Microsoft price increases, Ignite is back later this year, we bid IE11 farewell, cover the latest Teams new features and – discuss Exchange vulnerabilities you need to patch and protect yourself against.Read More
It’s incredible, but reports still come in to prove that thousands of unpatched Exchange on-premises servers remain connected to the internet. New reports indicate that servers continue to be attacked and that thousands of vulnerable servers remain available as hacking targets. It’s time to either get patched or move to the cloud.Read More
After a decade of no price increases for Office 365 licenses, Microsoft plans to introduce new pricing effective March 1, 2022. The uplifts range from $3 to $4 extra per user per month. This doesn’t sound much, but an extra $36 per user per year for Office 365 E3 quickly mounts up. And when you look at the overall installed base, some eyewatering numbers are involved. While we might complain about increases, I still think Office 365 and Microsoft 365 are reasonable value.Read More
Microsoft has hired a new boss to lead development of Teams consumer. This is the version bundled in Windows 11 based on a new client architecture. But as we explain here, while Microsoft will ship a nice new consumer Teams client in Windows 11, there’s a bunch of work to be done to ship an enterprise Teams client built on the new architecture. Don’t expect this client to appear when Windows 11 ships.Read More
If allowed by your organization, you can send email to a Teams channel. Teams uses the email to start a new conversation and this is a great way to get a debate going about something which first appears in email. Managing the Teams email integration features isn’t hard. You can define domains to accept email from and enable or disable the feature. After that, it’s up to team members to use the capability. Hopefully, they’ll resist the temptation to remove email addresses from channels, which is something which should be limited to team owners.Read More
From August 17, 2021, Microsoft 365 apps no longer support IE11 (the Teams browser client dropped support last year). IE11 fans need to move to a new browser. Microsoft would prefer if you choose the Edge browser, but anything but IE11 should do a better job in the future.Read More
Microsoft has announced their intention to enable plus addressing across Exchange Online in January 2022. Plus addressing is a good capability, but it might cause some problems for tenants with mail-enabled recipients that have plus addresses in their set of proxy email addresses. Fortunately, we’ve written some PowerShell code to report those pesky addresses and to remove them if you want to do a big clean up before Microsoft makes the big switch in five months’ time.Read More