Granikos Technology Blog

The following PowerShell scripts have been published by our Exchange and Office 365 experts to the technical community at TechNet Gallery

General

• GlobalFunctions Module
  A module to provide centralized logging capabilites. This script is a *must have* for other Exchange 2013/2016 modules, if mentioned in the notes section of the script.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/210/globalfunctions-shared-powershell-library
  • TechNet Gallery: https://gallery.technet.microsoft.com/Centralized-logging-64e20f97
  • PowerShell Gallery: https://www.powershellgallery.com/packages/GlobalFunctions
     

Office 365

• Test Office 365 Domain Availability
  Using this script you can test the domain availability in Office 365 and Azure AD.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/296/test-office-365-domain-availability 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Test-Office-365Azure-AD-5301c105  
  • Github: https://github.com/Apoc70/Test-DomainAvailability 
     

Exchange Server 2013 / 2016

• Manage Master Category List for Shared Mailboxes and Teams
  C# solution to export/import/copy the master category list to other user/shared mailboxes or even Microsoft Teams calendar.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/1423/manage-master-category-list-for-shared-mailboxes-and-teams
  • TechNet Gallery: https://gallery.technet.microsoft.com/Manage-Category-List-for-3a9103f9
  • Github: https://github.com/Apoc70/MailboxCategoryListManager
     
• Create a new Room Mailbox with Security Groups
  A script to create a new room mailbox with associated full access and/or send-as security groups.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/337/create-a-new-room-mailbox-with-security-groups
  • TechNet Gallery: https://gallery.technet.microsoft.com/Create-a-new-Room-Mailbox-99a4e477
  • Github: https://github.com/Apoc70/New-RoomMailbox
     
• Export all user mailbox permissions
  This script exports all mailbox folder permissions for mailboxes of the type UserMailbox. This is useful for documentation purposes prior to migration.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/219/export-all-user-mailbox-folder-permissions 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Export-all-user-mailbox-155a33de 
  • Github: https://github.com/Apoc70/Get-MailboxPermissionReport 
     
• Remove Out-Of-Office rules from user mailbox
  This script searches for OOF rules created by users using the Outlook rule-tab in the OOF assistant and deletes exisiting OOF rules.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/328/remove-out-of-office-rules-from-user-mailbox 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Remove-Out-Of-Office-rules-3f740964 
  • Github: https://github.com/Apoc70/Manage-OOF-Settings 
     
• Add resized user photos automatically
  This script supports resizing of user photos and storing the resized images in Active Directory, Exchange On-Premises, or Exchange Online.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/307/add-resized-user-photos-automatically 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Bulk-resize-and-adding-of-1e74d85e 
  • Github: https://github.com/Apoc70/Set-UserPictures 
     
• Parse email messages content for further processing
  This script fetches emails from a given monitoring mailbox by searching email messages for a given subject string.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/322/parse-mailcontent 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Parse-email-message-bfdef982  
  • Github: https://github.com/Apoc70/Parse-MailContent 
     
• Update OWA vDir config across multiple servers
  This scripts checks multiple Exchange Server 2013 OWA web.config files for existence of IMCertificateThumbprint and IMServerName Xml nodes required for Skype for Business OWA integration.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/301/update-owa-vdir-webconfig-across-multiple-exchange-servers 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Update-OWA-vDir-config-086bbc17  
  • Github: https://github.com/Apoc70/Set-OwaIMSettings 
     
• Remove Orphaned HealthMailbox and SystemMailbox Accounts from MESO Container
  This script removes Active Directory objects for HealthMailboxes or SystemMailboxes in the Microsoft Exchange System Objects (MESO) container that do not have a homeMDB attribute set.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/297/remove-orphaned-healthmailbox-and-systemmailbox-accounts-from-meso-container 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Remove-orphaned-HealthMailb-9f33ccbe  
  • Github: https://github.com/Apoc70/Remove-OrphanedMailboxAccounts 
     
• Connect to Exchange Server 2013+ using remote PowerShell
  This script connects to a dedicated or a randomly selected Exchange Server using remote Powershell.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/293/connect-to-exchange-server 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Connect-to-Exchange-Server-0fefe0e4  
  • Github: https://github.com/Apoc70/Connect-ToExchange 
     
• Create Exchange internal/external Url based certificate requests
  This script helps to create ceritifcate requests (CSR) based on hostnames used for internal and external Urls of Exchange Server virtual directories.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/290/create-exchange-internalexternal-url-based-certificate-requests 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Create-Exchange-internalext-8784bfb1  
  • Github: https://github.com/Apoc70/Create-CertificateRequest  
     
• Export Messages from Transport Queue
  Script to suspend and export messages from a transport queue.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/282/export-messages-from-message-queue 
  • TechNet Gallery: https://gallery.technet.microsoft.com/Export-Messages-from-edd2c939  
  • Github: https://github.com/Apoc70/Export-MessageQueue  
     
• Simple import of multiple PST files for a single user
  A script to simplify the import of multiple PST file for a single user.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/234/simple-import-of-multiple-pst-files-for-a-single-user
  • TechNet Gallery: https://gallery.technet.microsoft.com/Simple-import-of-multiple-6cc49361
  • Github: https://github.com/Apoc70/Start-MailboxImport
     
• Create a new Team Mailbox with Security Groups
  A script to create a new shared mailbox with associated full access or send-as security groups.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/239/create-a-new-team-mailbox-with-security-groups
  • TechNet Gallery: https://gallery.technet.microsoft.com/Create-a-new-Mailbox-with-1b02f6e7
  • Github: https://github.com/Apoc70/New-TeamMailbox
     
• Find and remove corrupt HealthMailboxes
  Script to find and remove or disable Exchange Server 2013 HealthMailboxes
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/212/find-and-remove-corrupt-healthmailboxes
  • TechNet Gallery: https://gallery.technet.microsoft.com/Find-and-remove-corrupt-42c8bfc2
  • Github: https://github.com/Apoc70/Fix-HealthMailboxes
     
• Change IIS Log File Settings
  Script to configure IIS log file location and other log file settings, especially for Exchange Server 2013/2016
  • TechNet Gallery: https://gallery.technet.microsoft.com/Change-IIS-Log-File-e4bd3f4b
  • Github: https://github.com/Apoc70/Set-Webserver
     
• Purge Exchange Server 2013 and IIS Log Files
  Script to purge Exchange Server 2013 and IIS log file remotely from a managing or job server
  • Blog: https://www.granikos.eu/de/justcantgetenough/PostId/208/purge-exchange-server-and-iis-log-files
  • TechNet Gallery: https://gallery.technet.microsoft.com/Purge-Exchange-Server-2013-c2e03e72
  • Github: https://github.com/Apoc70/Purge-LogFiles
     
• Send emails for Transport Agent and Transport Rule testing
  Script for sending a defined number of emails of a certain type having a specific attachment for the testing of Transport Agents and Transport Rules
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/215/send-test-emails-to-validate-transport-rules-or-transport-agents
  • TechNet Gallery: https://gallery.technet.microsoft.com/Send-test-emails-to-a98c1ca4
  • Github: https://github.com/Apoc70/Send-TestMail
     
• Copy a receive connector from one Exchange 2013 Server to multiple Exchange Servers
  Script to copy a configured Exchange Server 2013 receive connector from a source server to additional Exchange 2013 servers.
  • TechNet Gallery: https://gallery.technet.microsoft.com/Copy-a-receive-connector-b20b9bef
  • Github: https://github.com/Apoc70/Copy-ReceiveConnector
     
• Copy anti-virus pattern to Exchange 2010/Exchange 2013 servers
  Script to copy anti-virus pattern files from a given source location to multiple Exchange 2010/Exchange 2013 servers
  • TechNet Gallery: https://gallery.technet.microsoft.com/Copy-anti-virus-pattern-to-f05a9af2
  • Github: https://github.com/Apoc70/Copy-AntiVirusPattern
     
• Gather Exchange Configuration Data
  Script to gather Exchange Org configuration data and export the configuration as text/CSV files
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/287/gather-exchange-configuration-data
  • TechNet Gallery: https://gallery.technet.microsoft.com/Gather-Exchange-configurati-24dbf8d0 
  • Github: https://github.com/Apoc70/Get-ExchangeOrganizationDetails 
     
• Create a scheduled task for Exchange Server 2013
  This script adds a new scheduled task for an Exchange Server 2013 environment in a new task scheduler group "Exchange".
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/218/create-a-scheduled-task-for-exchange-server-2013
  • TechNet Gallery: https://gallery.technet.microsoft.com/New-ScheduledExchangeTask-449cb182 
  • Github: https://github.com/Apoc70/New-ScheduledExchangeTask 
     
• Clear Private Flag on Mailbox Messages
  C# Executable to clear an item's private flag after migrating public folder content to a shared mailbox.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/303/clear-private-flag-on-mailbox-messages
  • TechNet Gallery: https://gallery.technet.microsoft.com/Clear-Private-Flag-on-3cac4d50 
  • Github: https://github.com/Apoc70/RemovePrivateFlag 
     
• Set Mailbox Item Private Flag
  C# Executable to set an item's private flag after migrating public folder content to a shared mailbox from a legacy mailbox system.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/379/set-mailbox-item-private-flag
  • TechNet Gallery: https://gallery.technet.microsoft.com/Set-private-flag-on-1cbbfd72 
  • Github: https://github.com/Apoc70/SetPrivateFlag 
     

Exchange Server 2007/2010

• Fetch recently created public folders
  This script gathers all public folders created during the last X days and exports the gathered data to a CSV file
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/304/fetch-recently-created-public-folders
  • TechNet Gallery: https://gallery.technet.microsoft.com/Fetch-recently-created-635a7d98
  • Github: https://github.com/Apoc70/Get-NewPublicFolders
     
• Remove orphaned users and groups from legacy public folder ACLs
  Cleanup legacy public folder ACLs by removing orphaned other unproperly configured accounts
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/263/clean-legacy-public-folder-acl
  • TechNet Gallery: https://gallery.technet.microsoft.com/Remove-orphaned-users-and-bba62a39
  • Github: https://github.com/Apoc70/Clean-PublicFolderACL
     
• Exchange 2010 Public Folder Replication Report (UTF8 support)
  Updated version of the script originally posted by Mike Walker to support public folder with non-ASCII characters
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/211/exchange-public-folder-replication-report
  • TechNet Gallery: https://gallery.technet.microsoft.com/Exchange-2010-Public-315ea9aa
  • Github: https://github.com/Apoc70/Get-PublicFolderReplicationReport
  • Original Post at TechNet Gallery: https://gallery.technet.microsoft.com/office/Exchange-2010-Public-944df6ee
     
• Add multiple legacy public folder replicas recursively
  Script to get more control of adding legacy public folder replicas recursively
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/217/add-multiple-legacy-public-folder-replicas-recursively
  • TechNet Gallery: https://gallery.technet.microsoft.com/Add-multiple-legacy-public-255848b3
  • Github: https://github.com/Apoc70/Add-PFReplica

Other Stuff

• Convert Word documents using PowerShell
  This script converts Word compatible documents to a selected format utilizing the Word SaveAs function. Each file is converted by a single dedicated Word COM instance.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/353/convert-word-documents-using-powershell
  • TechNet Gallery: https://gallery.technet.microsoft.com/scriptcenter/Convert-Word-documents-5ccc1067
  • Github: https://github.com/Apoc70/Convert-WordDocument

Please send comments, wishes and ideas to support@granikos.eu.

Enjoy!

Need assistance with your Exchange Server Organization? You plan to upgrade your Exchange Server Organization? You plan to migrate to Office 365? Contact us: info@granikos.eu

Updates

Update 2018-06-16: Manage Master Category List for Shared Mailboxes and Teams added
Update 2018-04-29: Convert Word documents using PowerShell and Set Mailbox Item Private Flag added
Update 2018-01-24: Create a new Room Mailbox with Security Groups added
Update 2017-11-11: Export all user mailbox permissions added
Update 2017-09-22: Remove Out-Of-Office rules from user mailbox added
Update 2017-05-20: Parse email messages content for further processing and Update OWA vDir config across multiple servers added
Update 2017-03-18: Fetch recently created public folders and Clear Private Flag on Mailbox Messages added
Update 2017-02-22: Remove Orphaned HealthMailbox and SystemMailbox Accounts from MESO Container added
Update 2017-02-17: Test Office 365 Domain Availability added
Update 2017-02-13: Connect to Exchange Server 2013+ using remote PowerShell added
Update 2017-02-07: Create Exchange internal/external Url based certificate requests, Create a scheduled task for Exchange Server 2013 added
Update 2017-01-24: Gather Exchange Configuration Data added
Update 2017-01-05: Export Messages from Transport Queue added
Update 2016-11-29: Clean legacy public folder ACL added, Scripts categorized
Update 2016-11-28: Add multiple legacy public folder replicas added
Update 2016-08-18: Simple import of multiple PST files for a single user added
Update 2016-07-28: Change IIS Log File settings Github Url added, Create a new Team Mailbox with Security Groups added
Update 2016-06-04: GlobalFunctions added
Update 2015-06-18: Copy-ReceiveConnector updated
Update 2015-06-01: Exchange 2010 Public Folder Replication Report (UTF8 support)
Update 2015-05-21: Copy anti-virus pattern to Exchange 2010/Exchange 2013 servers added
Update 2014-12-10: Copy a receive connector from one Exchange Server to multiple Exchange Servers added

NoSpamProxy Azure Edition is the cloud based email security gateway of the successful NoSpamProxy family of products by Net at Work. The Azure edition of NoSpamProxy can easiliy be deployed using the Microsoft Azure Marketplace.

NoSpamProxy Azure easily connects an Office 365 tenant and offers an easy way to provide centralized email encryption and decryption with PGP and/or S/MIME for mailboxes hosted in Exchange Online. Additionally, NoSpamProxy Azure provides compliant anti-spam handling, an anti-malware component, and a large file portal.

The edition currently available in Microsoft Azure installs a NoSpamProxy single-server deployment. A single-server deployment combines the NoSpamProxy intranet role and the gateway role on a single server.

The NoSpamProxy Azure Edition is provided as BYOL (Bring Your Own License) deployment. In addition to the recurring fees for the Microsoft Azure VM you are required to buy a NoSpamProxy license. If you already own a NoSpamProxy Version 11 license, the license can be used for the NoSpamProxy Azure Edition as well.

Content

DeploymentOptions
Notes
Deployment
Links

Deployment Options

Due to the nature of a cloud service NoSpamProxy Azure can be operated in different scenarios in Microsoft Azure. By default the system is configured as a workgroup system without any Active Directory domain membership. The different operational scenarios for NoSpamProxy Azure depend on the existence of a Site-2-Site VPN between your Azure deployment and your on-premises IT infrastructure.

• Without Site-2-Site VPN to Microsoft Azure
   
  • An on-premises email server (e.g. Exchange Server or SmarterMail) utilizes NoSpamProxy Azure as an external relay for outgoing messages. Incoming messages are received by NoSpamProxy Azure and are forwarded to the on-premises email server via the internet.
     
  • Email addresses of internal recipients are maintained manually using plain text file. The file itself is imported automatically by NoSpamProxy Azure
    This is a viable option, if there aren't too many email addresses to maintain.
     
  • Good option for Office 365 customers running a cloud only deployment without any on-premises Active Directory users and mailboxes. The required import file can be created by exporting Office 365 recipients and email addresses.
     
  • RDP access to the Azure VM and NoSpamProxy Azure must be limited to an external IP address of the company network.
     
• With Site-2-Site VPN to Microsoft Azure
   
  • AN on-premises email server (e.g. Exchange Server or SmarterMail) utilizes NoSpamProxy Azure as an internal Relay for outgoing messages. Incoming messages are received by NoSpamProxy Azure and forwarded to the on-premises email servers using the Site-2-Site VPN.
     
  • Automated import of internal email recipients from a LDAP source (e.g. Active Directory)
    This option simplifies recipient maintenance, as recipients are automatically imported by NoSpamProxy Azure.
     
  • Perfect option for Office 365 customers maintaining user accounts on-premises and running Azure AD Connect or maybe even having a full Office 365 hybrid setup with centralized mail flow.
     
  • RDP access to the Azure VM and NoSpamProxy Azure restricted to internal company network(s).

Currently a direct connection to Azure AD is not supported, but it is planned for a future release.
 

Notes

• The Azure Service for NoSpamProxy Azure System requires a Reverse-DNS configuration, as any other public facing SMTP service. External SMTP servers must be able to perform a Reverse-DNS check successfully. A link on how to configure Reverse-DNS in Azure is listed in the Links section.
   
• The system name of the NoSpamProxy Azure VM should not follow internal IT naming conventions, as the name is publically resolvable. Otherwise you are going to expose your internal naming conventions.

Depending on the size of the Azure VM different throughputs can be reached in regards to emails per minute.

Tests have shown the following results for Standard A Virtual Machines:

Deployment

The following steps describe a simple deployment of NoSpamProxy Azure.

Go to Azure Marketplace and search for NoSpamProxy, select the NoSpamProxy Azure Edition.

Click Create to configure the NoSpamProxy Azure system.

Configure the required parameters as needed

• Name
  System name which is added to Azure DNS and externally resolvable.
• VM disk type
  When selecting SSD as VM disk type, you must choose an Azure VM supporting SSD in a following step.
• User name, Password
  User name of the local administrator account
  As the Azure VM is accessible via RDP from the internet by default, you should use a non-trivial user name and password.
• Subscription
  Azure subscription to add the Azure resources to.
• Resource group
  Resource group for the new Azure resources. The example creates a new resource group.
• Location
  Azure region for the new resource group.

Select an appropriate virtual machine type. NoSpamProxy Azure doesn't have extraordinary system requirements for processor and memory. SQL Server 2014 Express is downloaded and installed as part of the standard setup of NoSpamProxy. Even SQL Server 2014 Express can be run on a standard VM..

All other settings remain unchanged for this simple deployment. You can adjust the settings, if required for your individual deployment. Especially if you want to utilize exisiting resources.

• Storage Account
  Storage for Azure VM VHD files
• Virtual Network
  Azure virtual network for the new Azure VM
• Subnet
  Azure virtual network subnet
• Public IP Address
  External IP address
• Network Security Group
  Network firewall configuration

Verify the technical summary and click OK to add the configured system to your shopping cart.

Verify the selected Azure service offering and the configured virtual machine. Click Purchase to buy the selected subscription. The deployment is a so called BYOL Deployment and requires a valid NoSpamProxy trial license or an existing full license. After the NoSpamProxy setup as been completed in the virtual machine you will be redirected to a web page to request a trial license.

Connect to the newly deployed virtual machine using Remote Desktop. After first log on NoSpamProxy setup will start automatically as part of an scheduled task. The scheduled task will execute the following steps:

• Configure the preinstalled SQL Server Express Edition
• Download and setup of the most current release of NoSpamProxy
• Redirect to the NoSpamProxy Azure web page to request a trial license
• Removal of the scheduled task

Do not close or interrupt the Windows PowerShell window.

After the setup has finished the public web page of NoSpamProxy Azure Edition will be opened in Internet Explorer. After initial setup of the operating system Internet Explorer runs in secure mode. Therefore, a security warning is displayed. Just add the web page to the list of exclusions and request your personal NoSpamProxy trial license.

The program setup adds new security groups and adds the logged on account to these security groups. It is required to log off and log on again to reflect the new group memberships. This is mandatory to sucessfully manage NoSpamProxy.

After log on start the NoSpamProxy Configuration MMC to import the license.

The NoSpamProxy Configuration MMC displays the NoSpamProxy version.

After initial import of the license you can start configuring NoSpamProxy to suit your needs.

Links

• NoSpamProxy Azure
• NoSpamProxy Protection
• Blogartikel: Gateway based email encryption with Office 365
• Microsoft Azure Trial
• Microsoft Azure Reverse DNS
• Microsoft Azure Reverse DNS mit der CLI

Das Exchange Blog Cumulative Update für April 2016 (CU0416) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats April 2016 zusammen.

Exchange Server

• Pipeline Tracing Sender Address is Case Sensitive
  https://www.granikos.eu/de/justcantgetenough/PostId/194/pipeline-tracing-sender-address-is-case-sensitive
• Step-By-Step: Blocking Outside Apps from Accessing Exchange Web Services
  http://blogs.technet.com/b/canitpro/archive/2016/04/07/step-by-step-blocking-outside-apps-from-accessing-exchange-web-services.aspx
• Exchange 2013/2016 IMAP/EWS and service accounts
  https://ingogegenwarth.wordpress.com/2016/04/11/exchange-20132016-imapews-and-service-accounts/
• Exchange Server 2007: T-1 year and counting
  http://blogs.technet.com/b/exchange/archive/2016/04/11/exchange-server-2007-t-1-year-and-counting.aspx
• EWS Basics : Reporting on the Age of Items in a Folder
  http://gsexdev.blogspot.de/2016/04/ews-basics-reporting-on-age-of-items-in.html
• Change CASMailbox protocol settings based on AD group membership
  https://www.granikos.eu/de/justcantgetenough/PostId/198/change-casmailbox-protocol-settings-based-on-ad-group-membership

Office 365 & Exchange Online

• [STICKY] Office 365-Trust Center
  http://bit.ly/Office365TrustCenter
• [STICKY] Office 365 URLs and IP address ranges
  http://bit.ly/Office365URLsIPaddresses
• Preservation policies in Office 365
  http://blog.enowsoftware.com/solutions-engine/preservation-policies-in-office-365
• New in Intune: Block contact sync, conditional access support for Skype for Business Online, and more
  https://blogs.technet.microsoft.com/microsoftintune/2016/04/05/new-in-intune-block-contact-sync-conditional-access-support-for-skype-for-business-online-and-more/
• Step-By-Step: Importing an Un-Encrypted PST File into Office 365
  http://blogs.technet.com/b/canitpro/archive/2016/04/28/step-by-step-importing-an-un-encrypted-pst-file-into-office-365.aspx

Skype for Business, Lync Server & Communication

• Worldwide use of Office 365 Cloud PBX Now Simplified
  https://blogs.technet.microsoft.com/nexthop/2016/04/07/worldwide-use-of-office-365-cloud-pbx-now-simplified/
• Lync 2013 Server Update – April 2016
  https://greiginsydney.com/lync-2013-server-update-april-2016/
• Lync 2013 / SfB 2015 Client Security Update – April 2016
  https://greiginsydney.com/lync-2013-sfb-2015-client-security-update-april-2016/
• SfB 2016 Client Security Update – April 2016
  https://greiginsydney.com/sfb-2016-client-security-update-april-2016/
• Plan for Skype for Business Cloud Connector Edition
  https://technet.microsoft.com/en-us/library/mt605227.aspx

Microsoft Azure

• [STICKY] Microsoft Azure Trust Center
  http://azure.microsoft.com/en-us/support/trust-center
• Even more SAAS Apps working with #AzureAD!
  https://blogs.technet.microsoft.com/ad/2016/04/04/even-more-saas-apps-working-with-azuread/
• Azure Security Center - Threat Detection
  https://channel9.msdn.com/Shows/Azure-Friday/Azure-Security-Center-Threat-Detection
• AzureAD: Remember my MFA is now GA
  https://blogs.technet.microsoft.com/ad/2016/04/08/azuread-remember-my-mfa-is-now-ga/
• Azure AD Mailbag: Self-Service Password Reset Round 2
  https://blogs.technet.microsoft.com/ad/2016/04/15/azure-ad-mailbag-self-service-password-reset-round-2/
• Step-By-Step: Deploying Blackberry Enterprise Server on Azure via Azure Marketplace
  http://blogs.technet.com/b/canitpro/archive/2016/04/19/step-by-step-deploying-blackberry-enterprise-server-on-azure-via-azure-marketplace.aspx
• More #AzureAD MFA Coolness – selectable verification methods and more OATH!
  https://blogs.technet.microsoft.com/ad/2016/04/20/more-azuread-mfa-coolness-selectable-verification-methods-and-more-oath/

Allgemeine Themen & Sicherheit

• [STICKY] Microsoft Security TechCenter
  http://technet.microsoft.com/de-DE/security/dd252948
• Tasks, OOF settings, and more improvements to the REST APIs
  https://blogs.msdn.microsoft.com/exchangedev/2016/03/31/tasks-oof-settings-and-more-improvements-to-the-rest-apis/
• Controlling the Uncontrollable, Component 6: Information Protection
  https://blogs.technet.microsoft.com/in_the_cloud/2016/04/06/controlling-the-uncontrollable-component-6-information-protection/
• Transition your app from Live APIs to Outlook REST APIs
  https://blogs.msdn.microsoft.com/exchangedev/2016/04/06/transition-your-app-from-live-apis-to-outlook-rest-apis/
• New resources from Microsoft to support customer privacy and cloud compliance
  http://blogs.microsoft.com/on-the-issues/2016/04/07/new-resources-microsoft-support-customer-privacy-cloud-compliance
• Azure AD Mailbag: Azure AD Connect Health
  https://blogs.technet.microsoft.com/ad/2016/04/08/azure-ad-mailbag-azure-ad-connect-health/
• Microsoft’s commitments, including DPA cooperation, under the EU-U.S. Privacy Shield
  http://blogs.microsoft.com/eupolicy/2016/04/11/microsofts-commitments-including-dpa-cooperation-under-the-eu-u-s-privacy-shield/
• The evolution of access control: from VPN to identity-based anywhere access
  https://blogs.technet.microsoft.com/microsoftintune/2016/04/11/the-evolution-of-access-control-from-vpn-to-identity-based-anywhere-access/
• What’s The Art of War got to do with cybercrime? Quite a bit, actually.
  http://blogs.microsoft.com/cybertrust/2016/04/11/whats-the-art-of-war-got-to-do-with-cybercrime-quite-a-bit-actually/
• Why the DMCA is ready for the next chapter of innovation
  http://blogs.microsoft.com/on-the-issues/2016/04/12/why-the-dmca-is-ready-for-the-next-chapter-of-innovation
• Determine .NET Framework Version One-Liner
  https://www.granikos.eu/de/justcantgetenough/PostId/195/determine-net-framework-version-one-liner
• Inline CSS with ConvertTo-Html
  https://www.granikos.eu/de/justcantgetenough/PostId/197/inline-css-with-convertto-html
• Ransomware: Understanding the Risk
  http://blogs.microsoft.com/cybertrust/2016/04/22/ransomware-understanding-the-risk/
• Step-By-Step: Deploying a Domain Joined Nano Server via PowerShell
  http://blogs.technet.com/b/canitpro/archive/2016/04/21/step-by-step-deploying-a-domain-joined-nano-server-via-powershell.aspx
• Microsoft Trust Center adds new cloud services and certifications
  http://blogs.microsoft.com/cybertrust/2016/04/19/microsoft-trust-center-adds-new-cloud-services-and-certifications/
• What will cybersecurity look like in the next decade?
  http://blogs.microsoft.com/cybertrust/2016/04/27/what-will-cybersecurity-look-like-in-the-next-decade/

Podcast Empfehlungen

• Exchange Exposed
  http://bit.ly/ExchangeExposedPodcast

Tools

• Cloud Security Audit
• Mailscape 365 - Exchange Online Monitoring und Reporting
• Mailscape - Exchange Monitoring und Reporting
• Uniscope - Lync Monitoring und Reporting
• Compass - Active Directory Monitoring und Reporting
• ForeSite - SharePoint Monitoring und Reporting

Gerne unterstützen wir Sie bei der Planung und Durchführung Ihrer Exchange Server Implementierung oder Migration.

Sie denken über einen vollständigen Wechsel zu Office 365 oder eine Hybrid-Konfiguration mit Office 365 nach? Wir beraten Sie umfassend und ausführlich über die Möglichkeiten der Office 365 Plattform.

Sie möchten mehr über Exchange Server 2016 erfahren? Wir erläutern Ihnen die technischen Änderungen und Möglichkeiten für Ihr Unternehmen in einem persönlichen Workshop.

Weitere Informationen zu unseren Dienstleistungen finden Sie auf unserer Website (https://www.granikos.eu) oder nehmen Sie direkt mit uns Kontakt auf: info@granikos.eu

Das Exchange Blog Cumulative Update für September 2015 (CU0915) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats September 2015 zusammen.

Exchange Server

• A History of Cached Restrictions in Exchange, http://bit.ly/ExchangeCachedRestrictions
• PowerShell Scripts for Your Exchange Server Toolkit, http://bit.ly/ExchangeServerToolkit
• Exchange User Permission Enumeration Script, http://bit.ly/ExchangePermissionScript
• Introducing the Microsoft Office 365 Hybrid Configuration Wizard, http://bit.ly/Office365HCW
• Exchange EWS eDiscovery Powershell Module, http://bit.ly/EWSPowerShellModule
• Using Exchange Server Features to Prevent 'Reply All' Email Storms, http://bit.ly/ReplyAllEmailStorms
• Add multiple legacy public folder replicas recursive, http://bit.ly/AddPFReplica
• Released: September 2015 Quarterly Exchange Updates, http://bit.ly/ExchangeUpdates0915

Office 365 & Exchange Online

• [STICKY] Office 365-Trust Center, http://bit.ly/Office365TrustCenter
• [STICKY] Office 365 URLs and IP address ranges, http://bit.ly/Office365URLsIPaddresses (RSS Subscription, http://bit.ly/O365URLsIPsRSS)
• Deprecating the REST API preview endpoint, http://bit.ly/DeprecatedRESTAPI
• Step-By-Step: Setting up AD FS and Enabling Single Sign-On to Office 365, http://bit.ly/ADFSSingleSignOn

Skype for Business, Lync Server & Communication

• Lync 2013 / SfB 2015 Client Security Update – September 2015, http://bit.ly/LyncSfBClientUpdate0915
• Lync Server 2013 Security Update – September 2015, http://bit.ly/LyncServerUpdate0915
• SfB 2015 Server Security Update – September 2015, http://bit.ly/SfBUpdate0915

Windows Azure

• [STICKY] Microsoft Azure Trust Center, http://azure.microsoft.com/en-us/support/trust-center
• Azure AD Premium Dashboard is in preview!, http://bit.ly/AzureADPremiumDashboard
• Learn all about the Azure AD B2B Collaboration Preview!, http://bit.ly/AADB2BPreview
• Announcement: General Availability of IaaS VM Backup, http://bit.ly/IaaSVMBackup
• Microsoft Azure, Cloud and Enterprise Symbol / Icon Set - Visio stencil, PowerPoint, PNG, http://bit.ly/AzureVisioTools

Allgemeine Themen & Sicherheit

• [STICKY] Microsoft Security TechCenter, http://technet.microsoft.com/de-DE/security/dd252948
• Windows 10 Tips: Fixing Issues Caused by Universal Drivers, http://bit.ly/Windows10UniversalDriverIssues
• Identity-driven Security for your External Identities, http://bit.ly/IdentityDrivenSecurity
• PowerShell Tips: Managing Local Users and Groups, http://bit.ly/ManageLocalUsersandGroups
• Introducing add-in commands, http://bit.ly/OutlookAddInCommand
• Message Body property will filter unsafe HTML by default, http://bit.ly/FilterUnsafeHtml

Replay

• Dezember 2014: PowerShell Licensing SKU's in Office 365, http://bit.ly/Office365SKUs
• Mai 2014: Troubleshooting PowerShell Scheduled Jobs, http://bit.ly/PowerShellScheduledJobs
• März 2014: Managing Internet Explorer Trusted Sites with Group Policy, http://bit.ly/IETrustedSitesGPO
• März 2014: Ensuring your Office 365 network connection isn’t throttled by your Proxy, http://bit.ly/Office365ProxyThrottling
• Februar 2013: Using IIS Application Request Routing (ARR) as a TMG Replacement, http://bit.ly/IISARRReplacement
• Juli 2010: Confused About Named Properties Quotas in Exchange 2003 and Exchange 2007? Join the Club!, http://blogs.technet.com/b/exchange/archive/2010/07/29/3410545.aspx

Podcast Empfehlungen

• Exchange Exposed, http://bit.ly/ExchangeExposedPodcast
• The UC Architects, http://bit.ly/UCArchitectsPodcast
• RunAs Radio, http://bit.ly/RunAsRadioPodcast 
• Office 365 Developer Podcast (Direct RSS), http://bit.ly/DeveloperPodcast

Tools / Software

• Cloud Security Audit, http://www.granikos.eu/de/Produkte/CloudSOC
• Mailscape 365 - Exchange Online Monitoring und Reporting, http://www.granikos.eu/de/mailscape365
• Mailscape - Exchange Monitoring und Reporting, http://www.granikos.eu/de/mailscape
• Uniscope - Lync Monitoring und Reporting, http://www.granikos.eu/de/uniscope
• Compass - Active Directory Monitoring und Reporting, http://www.granikos.eu/de/compass
• ForeSite - SharePoint Monitoring und Reporting, http://www.granikos.eu/de/foresite

Gerne unterstützen wir Sie bei der Planung und Durchführung Ihrer Exchange Server Implementierung oder Migration.

Sie denken über einen vollständigen Wechsel zu Office 365 oder eine Hybrid-Konfiguration mit Office 365 nach? Wir beraten Sie umfassend und ausführlich über die Möglichkeiten der Office 365 Plattform.

Sie möchten mehr über Exchange Server 2016 erfahren? Gerne erläutern wir Ihnen die technischen Änderungen und Möglichkeiten für Ihr Unternehmen in einem persönlichen Workshop.

Weitere Informationen zu unseren Dienstleistungen finden Sie auf unserer Website (https://www.granikos.eu) oder nehmen Sie direkt mit uns Kontakt auf: info@granikos.eu

Das Exchange Blog Cumulative Update für Mai 2015 (CU0515) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats Mai 2015 zusammen.

Alle Links für des CU 0515 finden Sie über unser Bitly Tag Blog CU 0515.

Exchange Server

• A Closer Look at the New ActiveSync Redirection Feature in Exchange 2013 CU8, http://bit.ly/NewActiveSyncRedirection
• Coming soon: A first look at Exchange Server 2016, http://bit.ly/Exchange2016FirstLook
• A better way to collect logs from your Exchange servers, http://bit.ly/FilterExchangeLogs
• Top Exchange and Office 365 Sessions to Attend at Ignite, http://bit.ly/ExchangeOffice365atIgnite

Office 365 & Exchange Online

• [STICKY] Office 365-Trust Center, http://bit.ly/Office365TrustCenter
• Unable to retrieve proxy configuration data from the Federation Service, http://bit.ly/ADFSProxyIssue
• Office 365: Determine accounts that have forwarding enabled, http://bit.ly/FindForwardedEmailAccounts

Skype for Business, Lync Server & Communication

• Lync 2013 Client Update – March 2015, http://bit.ly/LyncClientMarch2015Updates
• Mucking with MWI – Part I, http://bit.ly/MuckingWithMWI
• Warning: Do Not Install Skype for Windows desktop 7.0 (KB2876229) if You're a Lync Customer, http://bit.ly/IssueWIthKB2876229
• The Lync Kerberos Account, http://bit.ly/LyncKerberosAccount
• Lync 2013 Client Update to Skype for Business – April 2015, http://bit.ly/UpdateToSkypeForBusiness
• Skype for Business 2015 Protocol Workloads Poster, http://bit.ly/SkypeForBusinessPoster

Windows Azure

• [STICKY] Microsoft Azure Trust Center, http://azure.microsoft.com/en-us/support/trust-center
• Step-By-Step: Installing and Configuring Azure PowerShell, http://bit.ly/InstallingAzurePowerShell
• Azure Cloud Application Design and Implementation Guidance, https://github.com/mspnp/azure-guidance
• Employee Self-Service App Access for Azure AD now in preview!, http://bit.ly/AzureADSelfService

Allgemeine Themen & Sicherheit

• [STICKY] Microsoft Security TechCenter, http://technet.microsoft.com/de-DE/security/dd252948
• Microsoft Security Bulletin Summary für Mai 2015, http://bit.ly/MSBS0515
• Closing the loop: Prescriptive, end-to-end solutions content, automated with PowerShell, http://bit.ly/PowerShellSolutions
• Protecting Active Directory Objects From Accidental Deletion, http://bit.ly/ProtectADObjects
• Getting Started with Microsoft Operations Management Suite, http://bit.ly/GettingStartedWithOpManSuite
• Announcing the Managed Outlook App, http://bit.ly/ManagedOutlookApp

Replay

• April 2015: Generating user message profiles for use with the Exchange Calculators, http://bit.ly/GenerateMessageProfiles
• April 2015: Troubleshooting High CPU utilization issues in Exchange 2013, http://bit.ly/HighCPUIssuesExchange2013
• August 2014: [Reference] The scheduled task is disabled after install, http://bit.ly/AADSyncScheduledTask

Podcast Empfehlungen

• The UC Architects, http://bit.ly/UCArchitectsPodcast
• RunAs Radio, http://bit.ly/RunAsRadioPodcast 
• Office 365 Developer Podcast (Direct RSS), http://bit.ly/DeveloperPodcast

Tools / Software

• Mailscape - Exchange Monitoring und Reporting, http://www.granikos.eu/de/mailscape
• Uniscope - Lync Monitoring und Reporting, http://www.granikos.eu/de/uniscope
• Compass - Active Directory Monitoring und Reporting, http://www.granikos.eu/de/compass
• ForeSite - SharePoint Monitoring und Reporting, http://www.granikos.eu/de/foresite

Gerne unterstützen wir Sie bei der Planung und Durchführung Ihrer Exchange Server Implementierung oder Migration.

Sie denken über einen vollständigen Wechsel zu Office 365 oder eine Hybrid-Konfiguration mit Office 365 nach? Wir beraten Sie umfassend und ausführlich über die Möglichkeiten der Office 365 Plattform.

Weitere Informationen zu unseren Dienstleistungen finden Sie auf unserer Website (https://www.granikos.eu) oder nehmen Sie direkt mit uns Kontakt auf: info@granikos.eu

The Program:

• Implementation/migration of round about 25 instances with a Specific Laboratory Software, supporting ~30 laboratories world-wide

• Reduce support cost per instance by standardization (for existing and added instances)

• Development of a template ("foundation") containing common functionality which can be influenced by configuration. Integration of the foundation into all instances. Provide all instances in operation with the current version of the foundation on a regular basis.

The challenges:

• 2-3 implementation projects parallel
  • Full scope not clear in the beginning

• Increasing number of instances in operation
  • Regular update of foundation version necessary to keep them streamlined in order to reduce support cost
  • Requirements and bugfixes from systems in operation have to be included into foundation development process

• Many and changing team members, part-time availability
  • Round about 12 team members (incl. development and support)
  • Changes due to boundary conditions triggered by external influences
  • 80% of people only part-time available for the program

• High interdependency between ongoing projects and Systems which are already in in operation due to foundation development and shared resources.

• Organization of communication process between projects and operation

• Balancing individual business needs on one hand versus streamlined standard software on the other hand

Why agile:

• Manage individual projects (introduction of new Software)
  • Decision for projects taken during run-time of the program
  • Sequence of projects changing

• Manage user stories across projects (details not available at start of the program)
  • Each new project delivers a slightly differentiating list of user stories
  • Each instance in operation delivers additional stories

• Manage process
  • Change process quite complex, adaptions to the process must be quickly implementable
     

The agile setup - how did we handle the challenges:

• In fact the program has been setup before we got in touch with the standard Scrum process (See our blog: What is Scrum?). So we used other role names, but some of them have exactly - amongst others - the tasks defined for the standard Scrum roles.

Orange = Business, Green = IT

• Scrum Master ~ Development Coordinator / Program QA

• Product Owner
  • Program Manager
    • Overall Product Owner
  • Project Manager and Application Managers
    • Product Owner for particular instances -> Prioritization and review / testing of stories
    • Write User Stories
    • "Imitate" the end user for sprint releases

• Global Change Manager
  • Scope definition for the foundation
  • Release management of the foundation
  • Organization of SME-Board
  • Prioritization
  • Product Owner for foundation

• Architect
  • Knowledge of implementation framework
  • Sets up development guidelines and general implementation approach
  • Gives first estimation of requirements with a technical view
  • Better management of the large product backlog, due to technical understanding, prioritization estimation

• Program QA
  • Set up of change management process for the program
  • Regular overall review of change management process
     

• Additional meetings
  • Subject Matter Experts Board (SME) (bi-weekly)
    • Participants: Whole team
    • Reviews the requirements from a technical and functional point of view
    • Gives implementation recommendations as decision memo for the CAB (Change Advisory Board)
    • Discusses additional technical issues
  • Process Review Meeting (quarterly in the beginning, currently twice a year)
    • Participants: Whole team 

The experiences:

• User stories: Definition of user stories dependent on target group, developing a template of user story definition fitting for all team member in different roles, with different views and different backgrounds is a time consuming task

• Testing: Developing awareness for testing right after delivering of implemented user story took also lot of time and patience 

• Definition of project related sprint releases is useful to get quick feedback and reduces the effort for project managers (not every project manager has to test each increment)

• A clear definition of product ownership incl. responsibility for successful product delivery is important for a successful project

This was the last part of our small Series about Agile Project Management

The whole Series contains 4 pieces:

Agile Project Management – Basics (Part1)
Agile Project Management – What is SCRUM (Part2)
Agile Project Management – Agile Project Management in real Life (Part3)
Agile Project Management – Agile on the next Level – Program Management (Part4)

If you have any comments on our Articles, your Feedback is highly welcome.