Meine Bewerbung als Microsoft Certified Trainer für die Saison 2017/2018 wurde angenommen. Die Schwerpunktthemen meiner Workshops und MOC Trainings sind: Exchange Server 2016 / 2013 / 2010 Office 365 Microsoft Azure Active Directory Federation Services Cloud Security Ich freue mich sehr auf mein drittes Jahr als MCT. Weitere Informationen zu den Workshops der Granikos finden Sie hier: https://www.granikos.eu/de/Beratung/Workshops    

Webkonferenz für KMU Am Dienstag, 23. Mai 2017, verstaltet Microsoft eine Online-Konferenz zum Thema  Unternehmensdaten in der Cloud - Kontrollverlust oder mehr Sicherheit für KMUs? Veranstaltungstext: Fragt man Entscheider in Unternehmen, hat Sicherheit höchste Priorität. In der Regel haben sie einen Partner oder einen Mitarbeiter, der sich darum kümmert. Und bekanntlich fasst man Systeme und Lösungen, die laufen, ungerne an. Hauptsache, die Daten befinden sich im eigenen Hause, denn da sind sie sicher. Aber sind sie das wirklich? Jedes dritte Unternehmen in Deutschland hat bereits Angriffe auf seine IT-Infrastruktur verzeichnet. Der deutsche Mittelstand rückt dabei immer stärker in den Fokus von Cyber-Spionage und Datendieben. Wie sehen die Angriffsszenarien aus? Was geschieht mit den Daten? Und wie sollten Unternehmen handeln? Gerade viele KMUs sind in Sachen IT schlechter gesichert als sie denken. Hinzu kommt, dass manche Unternehmen modernen Cloud-Lösungen noch immer skeptisch gegenüberstehen (Stichwort: Kontrollverlust). – Mit dieser praxisorientierten Webkonferenz wollen wir Entscheidern aus kleinen und mittelständischen Unternehmen aufzeigen, welche Bedrohungslage besteht und wie sich eine Sicherheitsstrategie schon mit einfachen Mitteln umsetzen lässt. Die praxisorientierte Veranstaltung bietet ausreichend Raum auch für Ihre Fragen. Gerade auch im ...

Die nachfolgende Präsentation wurde im Rahmen des Treffens der Exchange User Group Berlin am 11. Mai 2017 geboten. Thema ist ein Überlick zu Active Directory Federation Services. Ergänzt wird die Präsentation durch einen AD FS Deep Dive Abschnitt, der mehr die technischen Details und Abläufe von AD FS darstellt.   Viel Spaß. Links Exchange User Group Berlin Link zur Präsentation

Das Exchange Blog Cumulative Update für April 2017 (CU0417) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats April 2017 zusammen. Exchange Server Outlook for Mac in Coexistence Environment https://ingogegenwarth.wordpress.com/2017/04/05/ol-mac-coex/ Using the Office365/Exchange 2016 REST API to access Mailbox data using PowerShell part 3 http://gsexdev.blogspot.com/2017/04/using-office365exchange-2016-rest-api.htmlhttp://gsexdev.blogspot.com/2017/04/using-office365exchange-2016-rest-api.html List the users that have Automapping enabled for a given mailbox https://blogs.technet.microsoft.com/exovoice/2017/04/25/list-the-users-that-have-automapping-enabled-for-a-given-mailbox/ Office 365 & Exchange Online [STICKY] Office 365-Trust Center http://bit.ly/Office365TrustCenter [STICKY] Office 365 URLs and IP address ranges http://bit.ly/Office365URLsIPaddresses Office 365 Support and Recovery Assistant (aka SaRA) http://diagnostics.office.com/ AAD Connect Version 1.1.484.0 Released http://www.expta.com/2017/04/aad-connect-version-114840-released.html Using Azure B2B to invite external users to SharePoint Online http://artokai.net/2016/SPOnlineAndAzureB2B/ New step-by-step deployment for Office 365 federated authentication in Azure https://blogs.technet.microsoft.com/solutions_advisory_board/2017/04/25/new-step-by-step-deployment-for-office-365-federated-authentication-in-azure/ Recover deleted items from a group mailbox in Office 365 https://blogs.technet.microsoft.com/exovoice/2017/04/26/recover-deleted-items-from-a-group-mailbox-in-office-365/ Connect to Office 365 services with multifactor authentication (MFA) and PowerShell https://blogs.technet.microsoft.com/solutions_advisory_board/2017/04/27/connect-to-office-365-services-with-multifactor-authentication-mfa-and-powershell Skype for Business, Lync Server & Communication Lync 2013 / SfB 2015 Client Update – April 2017 https://greiginsydney.com/lync-2013-sfb-2015-client-update-april-2017/ Skype Online – How To Create and Apply Dial Plans http://blogs.perficient.com/microsoft/2017/04/skype-online-how-to-create-and-apply-dial-plans/ Microsoft Azure [STICKY] Microsoft Azure Trust ...

Am 16. Mai 2017 findet der SharePoint Virtual Summit statt. In den letzten Monaten wurden im Bereich SharePoint und OneDrive for Business zahlreiche Neuerungen eingeführt Die erste SharePoint App für alle mobilen Plattformen und eine neue Benutzeroberfläche in Office 365 Nahtlose Integration moderner SharePoint Team Sites mit Office 365 Groups und Microsoft Teams Neuer OneDrive Sync Client mit Support für SharePoint Dateien und geteilte Ordner PowerApps und Microsoft Flow Integration zur Unterstützung zur schnellen Entwicklung von Apps und Geschäftsprozessen SharePoint Framework als modernes Client-Entwicklungsmodel Neue Sicherheits- und Compliancefunktionen, wie z.B. Data Loss Prevention (DLP), Conditional Access und Mobile Device Management (MDM) Insbesondere für OneDrive for Business werden auf der Veranstaltung interessante Neuigkeiten verkündet und demonstriert werden. Eine Teilnahme lohnt sich, Registrieren Sie sich jetzt

Das Exchange Blog Cumulative Update für März 2017 (CU0317) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats März 2017 zusammen. Exchange Server Outlook:No free/busy in scheduling assistant https://ingogegenwarth.wordpress.com/2017/03/06/outlookno-freebusy-in-scheduling-assistant/comment-page-1/ How to hunt down an EAS bug https://ingogegenwarth.wordpress.com/2017/03/13/hunteasbug/ It’s less than a month until Exchange 2007 is end of life. Here are your options. http://www.stevieg.org/2017/03/its-less-than-a-month-until-exchange-2007-is-end-of-life-here-are-your-options Fixing Broken BackEnd Site http://farkhadm.blogspot.de/2017/03/fixing-broken-backend-site.html Multi-Factor Authentication for the Hybrid Configuration Wizard and Remote PowerShell https://blogs.technet.microsoft.com/exchange/2017/03/14/multi-factor-authentication-for-the-hybrid-configuration-wizard-and-remote-powershell/ Get-ExchangeDiagnosticInfo: Deep dive https://ingogegenwarth.wordpress.com/2017/03/17/diagnosticinfo-deep-dive/ How to Uninstall Antispam Agents on Exchange Servers http://www.expta.com/2017/03/how-to-uninstall-antispam-agents-on.html Exchange Server Edge Support on Windows Server 2016 Update Office 365 & Exchange Online [STICKY] Office 365-Trust Center http://bit.ly/Office365TrustCenter [STICKY] Office 365 URLs and IP address ranges http://bit.ly/Office365URLsIPaddresses Office 365 Support and Recovery Assistant (aka SaRA) http://diagnostics.office.com/ Exchange Edge Server and Common Attachment Blocking In Exchange Online Protection http://c7solutions.com/2017/03/exchange-edge-server-and-common-attachment-blocking-in-exchange-online-protection How to see the IP addresses from where your Office 365 users are accessing their mailbox https://blogs.technet.microsoft.com/exovoice/2017/03/14/how-to-see-the-ip-addresses-from-where-your-office-365-users-are-accessing-owa/ Office 365 Begins Force-Feeding Groups to Tenants http://www.expta.com/2017/03/office-365-begins-force-feeding-tenants.html Bypassing Focused Inbox and Clutter Folders http://c7solutions.com/2017/03/bypassing-focused-inbox-and-clutter-folders Administrators, AADConnect and AdminSDHolder Issues ...

Diese Präsentation ist der erste Teile eines Workshops zum Thema AD FS und Office 365. In diesem ersten Teil wird ein Überblick zu den Active Directory Federation Serverice geboten. Betrachtet werden die Entwicklung von AD FS, die Voraussetzungen für einen sicheren Betrieb und Darstellung von Best Practices.     AD FS Workshop | Part 1 | Quick Overview    

Das Exchange Blog Cumulative Update für Februar 2017 (CU217) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats Februar 2017 zusammen. Exchange Server Analyzing Exchange Transaction Log Generation Statistics – Revisited https://blogs.technet.microsoft.com/exchange/2017/01/31/analyzing-exchange-transaction-log-generation-statistics-revisited/ Exchange 2016 and FileMappingSize https://ingogegenwarth.wordpress.com/2017/02/07/exchange-2016-and-filemappingsize/ Exchange and VMWare Guest Introspection https://eightwone.com/2017/02/10/exchange-and-vmware-guest-introspection/ Office 365 & Exchange Online [STICKY] Office 365-Trust Center http://bit.ly/Office365TrustCenter [STICKY] Office 365 URLs and IP address ranges http://bit.ly/Office365URLsIPaddresses Moderated Group scenario in Hybrid configuration https://blogs.technet.microsoft.com/exovoice/2017/02/05/moderated-group-scenario-in-hybrid-configuration/ How to resolve the following issue: you re-enable an account of a returning employee, you assigned a license, but the mailbox is not provisioning https://blogs.technet.microsoft.com/exovoice/2017/02/11/how-to-resolve-the-following-issue-you-re-enable-an-account-of-a-returning-employee-you-assigned-a-license-but-the-mailbox-is-not-provisioning/ Skype for Business, Lync Server & Communication Lync 2013 / SfB 2015 Client Update – February 2017 https://greiginsydney.com/lync-2013-sfb-2015-client-update-february-2017/ How to configure shared SIP address space? http://communicationsknowledge.blogspot.de/2017/02/how-to-configure-shared-sip-address.html SfB 2015 Server Update – February 2017 https://greiginsydney.com/sfb-2015-server-update-february-2017/ Microsoft Azure [STICKY] Microsoft Azure Trust Center http://azure.microsoft.com/en-us/support/trust-center Step-by-Step: Azure Storage Encryption at Rest https://blogs.technet.microsoft.com/canitpro/2017/02/01/step-by-step-azure-storage-encryption-at-rest/ Azure AD News: Azure MFA cloud based protection for on-premises VPNs is now in public preview https://blogs.technet.microsoft.com/enterprisemobility/2017/02/06/azure-ad-news-azure-mfa-cloud-based-protection-for-on-premises-vpns-is-now-in-public-preview/ AD FS deployment in Azure https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-azure-adfs AzureAD now supports Federated ...

Die rechtlichen Rahmenbedingungen einer Nutzung der Office 365 EU-Cloud und der Microsoft Cloud mit deutscher Treuhand sind komplex. In den nachfolgenden zwei Videos erklärt Wilfried Reiners von PRW Rechtsanwälte im Videokanal von Microsoft Business die wichtigsten Punkte beider Varianten. Die kompakt dargestellten Informationen helfen Ihnen, eine erste Bewertung der beiden Microsoft Cloud Angebote vornehmen zu können. Datenschutz in der Microsoft EU-Cloud   Rechtlicher Überblick: Die Microsoft Cloud mit deutscher Datentreuhand   Bei technischen Fragen zu den Unterschieden der beiden Cloud Angebote unterstützen wir Sie gerne. Schreiben Sie uns: info@granikos.eu    

Das Exchange Blog Cumulative Update für Januar 2017 (CU0117) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats Januar 2017 zusammen. Exchange Server Released: Exchange Generate Message Profile Script v2.0 https://blogs.technet.microsoft.com/exchange/2016/12/30/released-exchange-generate-message-profile-script-v2-0/ Misconfigured receive connector breaks voicemail delivery https://exchangemaster.wordpress.com/2017/01/05/misconfigured-receive-connector-breaks-voicemail-delivery/ Released: Exchange Server Role Requirements Calculator 8.4 https://blogs.technet.microsoft.com/exchange/2017/01/05/released-exchange-server-role-requirements-calculator-8-4/ Troubleshooting Exchange with LogParser: EWS logs https://ingogegenwarth.wordpress.com/2017/01/12/troubleshooting-exchange-with-logparser-ews-logs/ History of a calendar item https://ingogegenwarth.wordpress.com/2017/01/20/history-of-a-calendar-item/ Showing the Recipient history from the Out of Office feature using EWS http://gsexdev.blogspot.de/2017/01/showing-recipient-history-from-out-of.html Why using MAPIBlockOutlookExternalConnectivity is a bad idea https://ingogegenwarth.wordpress.com/2017/01/23/why-using-mapiblockoutlookexternalconnectivity-is-a-bad-idea/ Office 365 & Exchange Online [STICKY] Office 365-Trust Center http://bit.ly/Office365TrustCenter [STICKY] Office 365 URLs and IP address ranges http://bit.ly/Office365URLsIPaddresses How to confirm if your IP address is blocked by Exchange Online Protection (EOP) http://www.expta.com/2017/01/how-to-confirm-if-your-ip-address-is.html Delete a list of folders from specific mailboxes with EWS Managed API 2.2 and Application Impersonation, in Exchange Online https://blogs.technet.microsoft.com/exovoice/2017/01/12/delete-a-list-of-folders-from-specific-mailboxes-with-ews-managed-api-2-2-and-application-impersonation-in-exchange-online/ Recover soft-deleted mailboxes in an Exchange Hybrid scenario https://blogs.technet.microsoft.com/exovoice/2017/01/20/recover-soft-deleted-mailboxes-in-an-exchange-hybrid-scenario/ RC4 Kerberos and AD FS Issues http://c7solutions.com/2017/01/rc4-kerberos-and-ad-fs-issues Send-as and Send-on-behalf of for groups in Outlook https://blogs.technet.microsoft.com/exchange/2017/01/24/send-as-and-send-on-behalf-of-for-groups-in-outlook/ Skype for Business, Lync Server & Communication Skype for Business – Niggle ...

Troubleshooting Active Directory Federation Services is a tedious tasks for any administrator. Therefore, I've started this blog post to have a comprehensive overview of information sources. The following list provides links for Active Directory Federation Services troubleshooting: ADFS – How to enable Trace Debugging and advanced access logging, https://migration-blog.com/2015/11/26/adfs-how-to-enable-trace-debugging-and-advanced-access-logging/ Troubleshooting ADFS: Enabling additional logging, http://www.jaapbrasser.com/troubleshooting-adfs-enabling-additional-logging/ AD FS Diagnostics Module, https://gallery.technet.microsoft.com/scriptcenter/AD-FS-Diagnostics-Module-8269de31 Under the hood tour of Azure AD Connect Health: AD FS Diagnostics Module, https://blogs.technet.microsoft.com/aadceeteam/2015/02/13/under-the-hood-tour-of-azure-ad-connect-health-ad-fs-diagnostics-module/ AD FS for Windows Server 2016 Best Practices, https://flamingkeys.com/ad-fs-windows-server-2016-best-practices/ Backup and Recovery with the AD FS Rapid Restore Tool, https://blog.auth360.net/2016/10/02/backup-and-recovery-with-the-ad-fs-rapid-restore-tool/ Additonal information about AD FS can be found here:  If you know of other AD FS troubleshooting information, please use the comments section below to share.    

Description This script fetches emails from a given monitoring mailbox by searching email messages for a given subject string. In this case email messages sent by the ENow Management Suite (http://enowsoftware.com/). Status messages are parsed to extract Disk Performance alert data for further processing in Power BI. The mailbox is queried using Exchange Web Services (EWS). The EWS endpoint is identified by AutoDiscover. The script exports the following columns for further processing: SERVER = Name of Exchange server reporting issue DATE = Date of issue occurance (Short Date) TIME = Time of issue occurance (Long Time) IO = READ or WRITE THRESHOLD = WARNING or CRITICAL VALUE = reported value You can easily adjust the script to fit your requirements. Search for other message subjects and parse for other content in the message body. Requirements Windows Server 2012 R2+  Exchange Server 2013+ Exchange Web Services Library Examples Code Samples # Run script using default parameters .\Get-EmailContent.ps1 Example output "COMPUTER";"DATE";"TIME";"IO";"THRESHOLD";"VALUE" "EXLABP08";"19.05.2017";"11:15:38";"READ";"Critical";"109,90" "EXLABP08";"19.05.2017";"11:15:38";"WRITE";"Warning";"23,61" "EXLABP08";"19.05.2017";"11:15:38";"READ";"Critical";"80,13" "EXLABP08";"19.05.2017";"11:15:38";"WRITE";"Warning";"21,58" "EXLABP08";"19.05.2017";"11:15:38";"READ";"Warning";"33,01" "EXLABP08";"19.05.2017";"11:15:38";"READ";"Critical";"53,04" "EXLABP08";"19.05.2017";"11:15:38";"READ";"Warning";"24,24" "EXLABP08";"19.05.2017";"11:15:38";"READ";"Warning";"40,01" Power BI report examples This example shows that P04 and P08 have exceeded the critical and warning state disk performance thresholds more often than the other servers. The next example shows the same date ...

My application as Microsoft Certified Trainer for the next year has been accepted by Microsoft. My workshops and MOC courses focus on: Exchange Server 2016 / 2013 / 2010 Office 365 Microsoft Azure Active Directory Federation Services Cloud Security i am looking forward to a third successful year as MCT. If you are looking for additonal information about workshops provided by Granikos check this page: https://www.granikos.eu/en/Consulting/Workshops        

When you delete a public folder using a legacy Outlook client, you can easily restore the deleted folder and it's content using the Recover Deleted Items function.  Due to a fancy trick implemented in Outlook 2013 and Outlook 2016 the recovered folder will not be recovered using it's full name. This phenomenon has been verified with Exchange On-Premises and Exchange Online on the server side and Outlook 2013/2016 and Outlook 365 ProPlus. The following example uses public folders in Exchange Online and Outlook 365 ProPlus. Example In this example I will delete and recover a public folder named My Public Folder. After deletion of My Public Folder and it's content, I need to select the original parent folder and click the Recover Deleted Items button in the button bar. The Recover Deleted Items dialogue opens and we select the deleted item for recovery. The dialogue displays the original name of the deleted folder. After recovering the deleted folder the folder is recovered with the first character only. That's an annoying result in regards to customer self-care when users restore deleted items on their own behalf. But wait, there is a ...

The PowerShell script to Set mailbox quotas at database or mailbox level the simple way has been updated to Version 1.4. The code has been refactored to functions and has received some PowerShell hygiene patters. Please report any issues directly at Github. If you like the script, please rate the script at TechNet Gallery. Enjoy!    

  The PowerShell script to purge Exchange Server and IIS log files has been updated to version 2.0. Release 2.0 allows for copying of files that will be deleted to be copied to a central file repository. The script will create a folder per server and the full log file folder structure will be preserved. The next release will contain an option to compress the copied log files. Added code: function Copy-LogFiles { [CmdletBinding()] param( [string]$SourceServer, [string]$SourcePath, $FilesToMove ) if($SourceServer -ne '') { # path per SERVER for zipped archives $ServerRepositoryPath = Join-Path -Path $RepositoryRootPath -ChildPath $SourceServer # subfolder used as target for copying source folders and files $ServerRepositoryLogsPath = Join-Path -Path $ServerRepositoryPath -ChildPath $LogSubfolderName $ServerRepositoryPath = Join-Path -Path $RepositoryRootPath -ChildPath $SourceServer if(!(Test-Path -Path $ServerRepositoryPath)) { # Create new target directory for server, if does not exist $null = New-Item ...

Problem You can block an user from logging on to Office 365 by setting the BlockCredential attribute to $true. Set-MsolUser -UserPrincipalName myuser@mcsmemail.de -BlockCredential $true But the MSOL user attribute is reverted to $false, when ADD Connect synchonization cycle runs. This happens, because the local Active Directory attribute accountEnabled is used to controll the BlockCredential attribute in Azure AD. Solution If your IT operation requires the ability to have enabled users in your local Active Directory infrastructure and you need to prevent logon to cloud services you need to prevent the accountEnabled attribute from being synchronized to Azure AD. This might not necessarily be a general requirement during normal operations, but might be useful while doing a Proof-of-Concept. Just exclude the attribute from the Azure Active Directory connector in the Synchronization Service Manager. The following script disables all users excluding Users following a specific naming pattern Users listed in a string array # Userfilter $UserExceptions = ("Sync_SYNC01_add98768492f@mcsmemail.onmicrosoft.com","SPO-SRV-ACCOUNT@mcsmemail.de","SynchedAdmin@mcsmemail.de") # Fetch synchronized users $DomainAccounts = Get-MsolUser -EnabledFilter EnabledOnly -MaxResults 5000 | Where-Object -Property LastDirSyncTime -ne $null # Select synchronized users not following the pattern ADM*@mcsmemail.de (admin accounts in this case) $DomainAccountsWithoutAdmins = $DomainAccounts | ...

The PowerShell module GlobalFunctions got updated to Version 2.0. This module is used by some of my PowerShell scripts which utilize centralized logging.  The new release contains the first functions required for some upcoming scripts for managing on-boarding process for joiners and the off-boarding process for leavers for companies utilizing Office 365. Changes File encoding switch from UTF8 to Unicode New functions Format-SpecialCharactersUpperCase New-RandomPassword Notes The New-RandomPassword functions is based on Simon Wahlin's script published here: https://gallery.technet.microsoft.com/scriptcenter/Generate-a-random-and-5c879ed5 Links Original blog post: https://www.granikos.eu/en/justcantgetenough/PostId/210/globalfunctions-shared-powershell-library Easiest install via PowerShell Gallery: https://www.powershellgallery.com/packages/GlobalFunctions Report issues at Github: https://github.com/Apoc70/GlobalFunctions        

Updated 2017-04-02 As an Exchange administrator you normally perform tasks by executing PowerShell scripts. Some of these scripts are executed automatically, some are run manually as these scripts require more attention. Think about a completely different approach. Have you ever thought about administrating Exchange Server or your Exchange Online instance using your voice? Thanks to Alexa skills we can do something like "Alexa, ask Exchange Assistant to create a new mailbox for John Doe" "Alexa, is the CEO's mailbox in good shape?" Or run something more complicated "Alexa, start Exchange to setup 5 new Exchange servers, please" Sounds like magic, right? Solution As a solution we use the following technologies: Alexa custom skills extension for Exchange Azure subscription supporting Azure Web API Azure Automation Azure Hybrid Runbook Worker The Azure Hybrid Runbook Worker enables you to execute PowerShell runbooks in your local infrastructure to manage local ressources. How does it work The solution consists of a Visual Studio Solution acting as an Alexa skill endpoint. The configured intents connect to your Azure Automation webhooks and trigger the execution of preconfigured PowerShell automation runbooks. These runbooks can either run ...

Description This script has been developed for a custom project with the following requirements: User photos are provided in rectangular format by the HR department and stored in a dedicated folder User photos should be resized automatically to a square format to be suitable for Active Directory thumbnailPhoto attribute (96x96 pixel) Exchange user photo (648x648 pixel) Intrant address book (150x150 pixel) Processed photos should be moved to a processed folder User logon names are used as user photo file names The script utilizes a self developed C# command line tool, which has been published as open source at Github. The ResizeImage Wiki explains the usage of the command line tool. The application's configuration controls the target size and an optional pixel based offset. Maybe the script will be useful in your project as well. Requirements ResizeImage.exe command line tool GlobalFunctions PowerShell module as desribed here Exchange Server 2013+ Management Shell (EMS) for storing user photos in on-premises mailboxes Exchange Online Management Shell for storing user photos in cloud mailboxes Write access to thumbnailPhoto attribute in Active Directory Examples The ...