Granikos Technology Blog

Am 22. Februar 2018 findet das erste Treffen der Exchange User Group Berlin in diesem Jahr statt. Das Treffen findet in den Räumlichkeiten vom Microsoft Accelerator Berlin statt.

Agenda

• Allgemeines und Planung
• Office 365 Compliance Solutions mit Rainer Seegatz (Microsoft)
• Bessere Zusammenarbeit mit OneDrive for Business – Moderne Dateianhänge mit Exchange 2016 und Office 365 von Thomas Stensitzki
• Zwangsloser Austausch in der Runde

Die Anmeldung erfolgt über die Webseite der Exchange User Group Berlin. 

• Ort: Microsoft Accelerator, Unter den Linden 17, 10117 Berlin
• Tag: 22. Februar 2018
• Zeit: 18:00 Uhr
• Weitere Informationen und Anmeldung 

Wir sehen uns.

Der Start mit Microsoft 365 ist nicht immer so einfach. Im Internet findet man ein Vielzahl an Informationen, weiß jedoch nicht sofort, welche Quellen "gute" Quellen sind und welche eher "nebulösen" Charakter haben.

Die folgenden Links sollen Ihnen den Einstieg in das Thema Microsoft 365 und in die Verwaltung der Clouddienste erleichtern.

Allgemeine Informationen

• Microsoft 365 für Großunternehmen (Microsoft 365 Enterprise)
• Microsoft 365 für mittelständische Unternehmen (Microsoft 365 Business)
• Microsoft 365 für den Bildungsbereich (Microsoft 365 Education)
• Office 365 for IT Pros
• Office 365 Roadmap Watch
• Office 365 Network Onboarding tool
• OneDrive for Business Leitfaden für Unternehmen
• Power Platform Self-Service Purchase FAQ
• The Complete Office 365 and Microsoft 365 Licensing Comparison
   
• Microsoft 365 Data Protection Addendum (https://aka.ms/DPA)
• Wo Kundendaten gespeichert werden
• Datenschutz-Folgenabschätzung: Leitfaden für Datenverantwortliche, die Microsoft Office 365 verwenden
• Workshop-Schulung für Chief Information Security Officer (CISO)
• Microsoft 365 - Compliance Informationen
• Microsoft Compliance Configuration Analyzer (MCCA)
• Microsoft Cloud App Security (MCAS)
   
• Licensing Terms and Documentation - Online Services SLA
• Product names and service plan identifiers for licensing

Datenschutz

• Microsoft Viva Insights-App in Microsoft Teams
• Datenschutzhandbuch für Briefing-E-Mails 
• Datenschutzhandbuch für MyAnalytics 
• Datenschutz Workplace Analytics
• Differenzieller Datenschutz in Workplace Analytics
• Datenschutz und Microsoft Teams

Adoption

• Übersicht der Adoption Ressourcen
• Microsoft 365 Adoption Guide
• Microsoft Teams Adoption Guide
• OneDrive Adoption Guide
• Security & Compliance Adoption Guide
• SharePoint Adoption Guide
• Teamwork Governance
• Outlook Mobile Adoption Guide
• Yammer Adoption Guide
• Schnellstart-Handbücher

Hybrides Arbeiten

• Exploring the Science of Work and Ingenuity

Entwicklung

• Erweiterbarkeit von Microsoft 365 - Extensibility Look Book Gallery
• Designing your Microsoft Teams app with UI templates (https://aka.ms/teams-ui-kit)
• Microsoft Teams Development Samples (https://aka.ms/teams-samples)

Migration

• Migrate your content into Microsoft 365

Azure AD

• Berechtigungen der Administratorrollen in Azure Active Directory

Microsoft Teams

• Speicherort von Daten in Microsoft Teams (https://aka.ms/teams-locations) 
• Verwalten von Personen, die Office 365-Gruppen erstellen können (https://aka.ms/create-o365-groups)
• Microsoft Teams IT-Architektur- und Telefonielösungen Poster
• SWOOP Benchmark Report (Video)

PowerShell Module

Folgende PowerShell Module benötigen Sie für die Verwaltung von Microsoft 365.

• Azure AD (v2.0)
  Wenn Ihnen ein Azure AD PowerShell Cmdlet begegnet, dass nicht im produktiven Release des Azue AD Modules enthalten ist, benötigen Sie eventuell die Azure AD Preview Version des Modules.

# Import des PowerShell-Modules
Install-Module -Name AzureAD

# Aufbau einer Verbindung zu Azure AD des globalen Office 365 Angebotes
Connect-AzureAD

# Aufbau einer Verbindung zu Azure AD des globalen Office 365 Angebotes (solange noch verfügbar)
Connect-AzureAD -AzureEnvironmentName AzureGermanyCloud

• SharePoint Online (PowerShell Gallery), bevorzugte Variante
• SharePoint Online (Classic Installer)

# Direkte Installation über die PowerShell Gallery
Install-Module -Name Microsoft.Online.SharePoint.PowerShell

# Import des SharePoint Online PowerShell-Modules
Import-Module -Name Microsoft.Online.SharePoint.PowerShell

# Festlegung des UPN-Anmeldenamen des SharePoint-Administrators
$UPN = 'user@varunagroup.de' # Beispiel UPN

# Festlegung des Office 365 Tenant-Namen
$SPOOrgName = 'VARUNAGROUP' # Beispiel Organisation

# Festlegung der Anmeldedaten
# Bei NUtzung von MFA muss das App-Kennwort verwendet werden
$Credential = Get-Credential -UserName $UPN -Message "Geben Sie Ihr Kennwort ein."

# Aufbau der Verbindung zu SharePoint Online OHNE MFA
Connect-SPOService -Url "https://$($SPOOrgName)-admin.sharepoint.com" -Credential $Credential

# Aufbau der Verbindung zu SharePoint Online MIT MFA
Connect-SPOService -Url "https://$($SPOOrgName)-admin.sharepoint.com"

• Exchange Online PowerShell V2 (Recommended)

# Installation des PowerShell-Modules
Install-Module -Name ExchangeOnlineManagement

# Aufbau einer Verbindung zu Exchange Online
# Nach der Verbindung können Sie V2-Cmdlets und ältere EXO-Cmdlets nutzen
Connect-ExchangeOnline -UserPrincipalName admin@varunagroup.de 

Hinweis

Mit dem PowerShell Cmdlet Connect-EXOPSSession können Sie sich auch in der Azure Cloud Shell mit Exchange Online verbinden und wie gewohnt verwalten. (Mehr erfahren)

• Exchange Online (Click-to-Run, C2R)

# Aufbau der Verbindung zu Exchange Online mit dem EXO MFA PowerShell-Modul V1
# zum globalen Office 365 Angebot
Connect-EXOPSSession -UserPrincipalName admin@varunagroup.de # Beispiel UPN

# zum deutschen Office 365 Angebot, solange verfügbar
Connect-EXOPSSession -UserPrincipalName admin@varunagroup.de -ConnectionUri https://outlook.office.de/PowerShell-LiveID -AzureADAuthorizationEndPointUri https://login.microsoftonline.de/common # Beispiel UPN

• Microsoft Teams

# Import des PowerShell-Modules
Import-Module -Name MicrosoftTeams

# Aufbau einer Verbindung zu Microsoft Teams im globalen Office 365 Angebot
Connect-MicrosoftTeams

• Skype for Business

Der Skype for Business Connector ist abgekündigt. Nutzen Sie das Microsoft Teams PowerShell Modul für alle Konfiguration rund um Teams und Enterprise Voice.
Weitere Information finden Sie in diesem Artikel: Move from Skype for Business Online Connector to the Teams PowerShell module

# Verbindung zu Skype for Business Online
# Dieses PowerShell-Modul wird auch zur Verwaltung von Microsoft Teams Funktionen verwendet
# Import des Skype for Business PowerShell-Modules
Import-Module -Name SkypeOnlineConnector

# Administrator-Anmeldeinformation 
$Credential = Get-Credential

# Erstellung einer neuen Skype for Business Online Session
$SfBSession = New-CsOnlineSession -Credential $userCredential

# Import der SfBSession in die aktuelle PowerShell-Session
Import-PSSession SfBSession

• Microsoft Graph

# Import des Graph PowerShell-Modules
Import-Module -Name Microsoft.Graph.Intune

# Akzeptieren der administrativen Zugriffsberechtigungen (einmalig notwendig)
Connect-MSGraph -AdminConsent

# Aufbau einer Verbindung zu Microsoft Graph
$UPN = 'admin@varunagroup.de' # Beispiel UPN
$password = Read-Host -AsSecureString -Prompt "Enter password for $UPN"
$Credential = New-Object System.Management.Automation.PSCredential ($UPN, $password)
$Connection = Connect-MSGraph -PSCredential $Credential

Für eine vereinfachte administrative Anmeldung empfehle ich Ihnen das PowerShell-Skript Connect-O365.ps1 von Chris Goosen bei GitHub.

• Microsoft Commerce (Self-Service Kaufoptionen für Anwender)

# Installation des PowerShell-Modules 
Install-Module -Name MSCommerce

# Import des PowerShell-Modules
Import-Module -Name MSCommerce

# Aufbau einer Verbindung zu Microsoft Commerce im globalen Office 365 Angebot
Connect-MSCommerce

• Office 365 Service Communications 

# Installation des PowerShell-Modules
Install-Module O365ServiceCommunications

# Import des installierten PowerShell-Modules
Import-Module O365ServiceCommunications

# Aufbau einer neuen PowerShell-Session 
# Funktioniert nur mit Basic Authentication, nicht mit MFA
$cred = Get-Credential

$session = New-SCSession -Credential $cred -Locale de-de

# Beispiel der Serviceinformationen im zugeordneten Office 365-Mandanten
Get-SCServiceInfo -SCSession $session

• PSServicePrincipal

PowerShell Gallery: https://www.powershellgallery.com/packages/PSServicePrincipal

Projektseite: https://github.com/dgoldman-msft/PSServicePrincipal

PowerShell-Skripte

• GitHub 
• PowerShell Gallery
• Meine Community-Skripte für Exchange Online und Office 365 
• PowerShell GUI zur Anmeldung an mehrere Microsoft 365 Dienste

• Export Microsoft 365 Group Report to CSV Using PowerShell

Microsoft Graph

• Graph Explorer

Blogs

Nachfolgend finden Sie eine Empfehlungsliste für Blogs, die ich regelmäßig als Informations- und Lernquelle nutze. Ebenso finden Sie Links zu Webseiten von Office 365-Experten, die interessante Informationen, jenseits von Blogartikeln, bereithalten.

• Hans Brender aka Mr. OneDrive
• Randy Chapman's UC Status – The home of UC News, Reviews & How-to's
• The Lonely Administrator - Practical advice for the automating IT Professional
• Mr. Tony Redmond - Office 365, technology, and anything else really…
• Just Can't Get Enough of IT Blog
• Granikos Blog
• Jaap Wesselius - UC Specialist Blog
• Luise Freese - Sketchnote Artist
• Brian Reid - Office 365 Subject Matter Expert
• Tim McMichael - Navigating the world of high availability…and occasionally sticking my head in the cloud…
• Todd Klindt's Office 365 Admin Blog
• Waldek Mastykarz - Innovation Matters | Office Development MVP
• Tomislav Karafilov - IT – SharePoint – .NET – Office 365 – Azure – DevOps – Community

• Microsoft 365 Blog
• Enterprise Mobility + Security
• Office 365: Developer Blogs
• Microsoft Security

Tools

• Mailscape 365
  Aktive Überwachung von Office 365 Endpunkten und der Cloud-Anwendererfahrung für Ihre Mitarbeiter
   
• ShareGate Apricot
  Reporting und Management Lösung für Microsoft Teams und Office 365-Gruppen
   
• ScriptRunner
  Software zur professionellen PowerShell Automatisierung
   
• AdminDroid
  Detailliertes Reporting und Controlling Ihres Office 365 Tenants
   
• Feedly
  Tool zur Aggregierung von RSS-Feeds

Weitere technische Links finden Sie im Artikel Troubleshooting Links für Exchange, Office 365 und mehr.

Viel Spaß mit Microsoft 365.

Mailscape 365 - Überwachung von Hybrid Exchange und Office 365: Viele Unternehmen verwenden eine lokale Exchange Organisation und Exchange Online in einer Hybrid-Konfiguration, um die Anforderungen ihrer Mitarbeiter zu erfüllen. Der Betrieb einer hybriden Exchange Organisation seine ganz eigenen Herausforderungen für das Monitoring der Dienstverfügbarkeiten. Beginnen Sie noch heute einen unverbindlichen 14-Tage Test von Mailscape 365.

Aktualisierungen

2021-05-31: Datenschutz und Microsoft Teams hinzugefügt
2021-05-27: Abschnitt Hybrides Arbeiten hinzugefügt
2021-05-12: Abschnitt Enwicklung hinzugefügt
2021-03-29: Abscnitt Datenschutz hinzugefügt
2021-02-25: Abschnitt Migration hinzugefügt
2021-02-11: Microsoft Cloud App Security (MCAS) hinzugefügt
2021-02-08: Datenschutz-Folgenabschätzung: Leitfaden für Datenverantwortliche, die Microsoft Office 365 verwenden hinzugefügt
2021-01-31: Abschnitt Azure AD hinzugefügt

The following PowerShell scripts have been published by our Exchange and Office 365 experts to the technical community at TechNet Gallery. Please use the GitHub repositories to report issues or to file feature requests.

General

• GlobalFunctions Module
  A module to provide centralized logging capabilities. This script is a *must have* for other Exchange 2013/2016/2019 modules if mentioned in the notes section of the script.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/210/globalfunctions-shared-powershell-library
  • PowerShell Gallery: https://www.powershellgallery.com/packages/GlobalFunctions

Office 365

• Test Office 365 Domain Availability
  Using this script you can test the domain availability in Office 365 and Azure AD.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/296/test-office-365-domain-availability 
  • Github: https://github.com/Apoc70/Test-DomainAvailability 
     
• Test thumbnailPhoto for Azure AD guest users
  Using this script you can update the default guest user profile photo.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/1708/set-thumbnailphoto-for-azure-ad-guest-users 
  • Github: https://github.com/Apoc70/Set-GuestUserPhoto 

Exchange Server 2013 / 2016 / 2019

• Exchange Environment Report v2
  This script creates an HTML report showing the following information about an Exchange 2019, 2016, 2013, 2010, and, to a lesser extent, 2007 and 2003 environment.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/1718/exchange-environment-report-v2
  • Github: https://github.com/Apoc70/Get-ExchangeEnvironmentReport
     
• Report for enabled client protocols
  This script gathers a list of enabled users for a selected Exchange Server client protocol.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/1815/report-for-enabled-client-protocols
  • Github: https://github.com/Apoc70/Get-EnabledProtocolReport
     
• Export delegate and SMTP forwarding information for Exchange (Online) mailboxes
  PowerShell script to export mailbox delegates, SMTP forwarding inbox rules, and mailbox SMTP forwarding information or compliance auditing.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/1693/export-mailbox-delegates-and-smtp-forwarding-information
  • Github: https://github.com/Apoc70/Get-DelegatesAndForwardingRules
     
• Manage Master Category List for Shared Mailboxes and Teams
  C# solution to export/import/copy the master category list to other users/shared mailboxes or even Microsoft Teams calendar.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/1423/manage-master-category-list-for-shared-mailboxes-and-teams
  • Github: https://github.com/Apoc70/MailboxCategoryListManager
     
• Create a new Room Mailbox with Security Groups
  A script to create a new room mailbox with associated full access and/or send-as security groups.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/337/create-a-new-room-mailbox-with-security-groups
  • Github: https://github.com/Apoc70/New-RoomMailbox
     
• Export all user mailbox permissions
  This script exports all mailbox folder permissions for mailboxes of the type UserMailbox. This is useful for documentation purposes prior to migration.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/219/export-all-user-mailbox-folder-permissions 
  • Github: https://github.com/Apoc70/Get-MailboxPermissionReport 
     
• Remove Out-Of-Office rules from user mailbox
  This script searches for OOF rules created by users using the Outlook rule-tab in the OOF assistant and deletes existing OOF rules.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/328/remove-out-of-office-rules-from-user-mailbox 
  • Github: https://github.com/Apoc70/Manage-OOF-Settings 
     
• Add resized user photos automatically
  This script supports resizing of user photos and storing the resized images in Active Directory, Exchange On-Premises, or Exchange Online.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/307/add-resized-user-photos-automatically 
  • Github: https://github.com/Apoc70/Set-UserPictures 
     
• Parse email messages content for further processing
  This script fetches emails from a given monitoring mailbox by searching email messages for a given subject string.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/322/parse-mailcontent 
  • Github: https://github.com/Apoc70/Parse-MailContent 
     
• Update OWA vDir config across multiple servers
  This script checks multiple Exchange Server 2013 OWA web.config files for the existence of IMCertificateThumbprint and IMServerName XML nodes required for Skype for Business OWA integration.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/301/update-owa-vdir-webconfig-across-multiple-exchange-servers 
  • Github: https://github.com/Apoc70/Set-OwaIMSettings 
     
• Remove Orphaned HealthMailbox and SystemMailbox Accounts from MESO Container
  This script removes Active Directory objects for HealthMailboxes or SystemMailboxes in the Microsoft Exchange System Objects (MESO) container that do not have a homeMDB attribute set.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/297/remove-orphaned-healthmailbox-and-systemmailbox-accounts-from-meso-container 
  • Github: https://github.com/Apoc70/Remove-OrphanedMailboxAccounts 
     
• Connect to Exchange Server 2013+ using remote PowerShell
  This script connects to a dedicated or a randomly selected Exchange Server using remote Powershell.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/293/connect-to-exchange-server 
  • Github: https://github.com/Apoc70/Connect-ToExchange 
     
• Create Exchange internal/external Url based certificate requests
  This script helps to create certificate requests (CSR) based on hostnames used for internal and external URLs of Exchange Server virtual directories.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/290/create-exchange-internalexternal-url-based-certificate-requests 
  • Github: https://github.com/Apoc70/Create-CertificateRequest  
     
• Export Messages from Transport Queue
  Script to suspend and export messages from a transport queue.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/282/export-messages-from-message-queue 
  • Github: https://github.com/Apoc70/Export-MessageQueue  
     
• Simple import of multiple PST files for a single user
  A script to simplify the import of multiple PST files for a single user.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/234/simple-import-of-multiple-pst-files-for-a-single-user
  • Github: https://github.com/Apoc70/Start-MailboxImport
     
• Create a new Team Mailbox with Security Groups
  A script to create a new shared mailbox with associated full access or send-as security groups.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/239/create-a-new-team-mailbox-with-security-groups
  • Github: https://github.com/Apoc70/New-TeamMailbox
     
• Find and remove corrupt HealthMailboxes
  Script to find and remove or disable Exchange Server 2013 HealthMailboxes
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/212/find-and-remove-corrupt-healthmailboxes
  • Github: https://github.com/Apoc70/Fix-HealthMailboxes
     
• Change IIS Log File Settings
  Script to configure IIS log file location and other log file settings, especially for Exchange Server 2013/2016
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/220/change-iis-log-file-settings
  • Github: https://github.com/Apoc70/Set-Webserver
     
• Purge Exchange Server 2013/2016/2019 and IIS Log Files
  Script to purge Exchange Server 2013/2016/2019 and IIS log file remotely from a managing or job server
  • Blog: https://www.granikos.eu/de/justcantgetenough/PostId/208/purge-exchange-server-and-iis-log-files
  • Github: https://github.com/Apoc70/Purge-LogFiles
     
• Send emails for Transport Agent and Transport Rule testing
  A script for sending a defined number of emails of a certain type having a specific attachment for the testing of Transport Agents and Transport Rules
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/215/send-test-emails-to-validate-transport-rules-or-transport-agents
  • Github: https://github.com/Apoc70/Send-TestMail
     
• Copy a receive connector from one Exchange 2013 Server to multiple Exchange Servers
  Script to copy a configured Exchange Server 2013/2016/2019 receive connector from a source server to additional Exchange 2013/2016/2019 servers.
  • Github: https://github.com/Apoc70/Copy-ReceiveConnector
     
• Add remote IP-address ranges to an existing receive connector
  Add remote IP address ranges to an Exchange Server 2013/2016/2019 receive connector.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/222/add-remote-ip-address-ranges-to-a-receive-connector
  • Github: https://github.com/Apoc70/Add-ReceiveConnectorIpAddress
     
• Copy anti-virus pattern to Exchange 2010/Exchange 2013 servers
  Script to copy anti-virus pattern files from a given source location to multiple Exchange 2010/Exchange 2013 servers
  • Github: https://github.com/Apoc70/Copy-AntiVirusPattern
     
• Gather Exchange Configuration Data
  Script to gather Exchange Org configuration data and export the configuration as text/CSV files
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/287/gather-exchange-configuration-data
  • Github: https://github.com/Apoc70/Get-ExchangeOrganizationDetails 
     
• Create a scheduled task for Exchange Server 2013+
  This script adds a new scheduled task for an Exchange Server 2013+ environment in a new task scheduler group "Exchange".
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/218/create-a-scheduled-task-for-exchange-server-2013
  • Github: https://github.com/Apoc70/New-ScheduledExchangeTask 
     
• Fetch all remote SMTP servers from Exchange receive connector logs
  This scripts fetches remote SMTP servers by searching the Exchange receive connector logs for the EHLO string.
  • Blog: -
  • Github: https://github.com/Apoc70/Get-RemoteSmtpServers
     
• Clear Private Flag on Mailbox Messages
  C# Executable to clear an item's private flag after migrating public folder content to a shared mailbox.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/303/clear-private-flag-on-mailbox-messages
  • Github: https://github.com/Apoc70/RemovePrivateFlag 
     
• Set Mailbox Item Private Flag
  C# Executable to set an item's private flag after migrating public folder content to a shared mailbox from a legacy mailbox system.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/379/set-mailbox-item-private-flag
  • Github: https://github.com/Apoc70/SetPrivateFlag 

Exchange Server 2007/2010

• Fetch recently created public folders
  This script gathers all public folders created during the last X days and exports the gathered data to a CSV file
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/304/fetch-recently-created-public-folders
  • Github: https://github.com/Apoc70/Get-NewPublicFolders
     
• Remove orphaned users and groups from legacy public folder ACLs
  Cleanup legacy public folder ACLs by removing orphaned other unproperly configured accounts
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/263/clean-legacy-public-folder-acl
  • Github: https://github.com/Apoc70/Clean-PublicFolderACL
     
• Exchange 2010 Public Folder Replication Report (UTF8 support)
  An updated version of the script originally posted by Mike Walker to support public folder with non-ASCII characters
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/211/exchange-public-folder-replication-report
  • Github: https://github.com/Apoc70/Get-PublicFolderReplicationReport
  • Original Post at TechNet Gallery: https://gallery.technet.microsoft.com/office/Exchange-2010-Public-944df6ee
     
• Add multiple legacy public folder replicas recursively
  Script to get more control of adding legacy public folder replicas recursively
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/217/add-multiple-legacy-public-folder-replicas-recursively
  • Github: https://github.com/Apoc70/Add-PFReplica

Other Stuff

• Convert Word documents using PowerShell
  This script converts Word compatible documents to a selected format utilizing the Word SaveAs function. Each file is converted by a single dedicated Word COM instance.
  • Blog: https://www.granikos.eu/en/justcantgetenough/PostId/353/convert-word-documents-using-powershell
  • Github: https://github.com/Apoc70/Convert-WordDocument

Please send comments, wishes, and ideas to support@granikos.eu.

Enjoy!

Need assistance with your Exchange Server Organization? You plan to upgrade your Exchange Server Organization? You plan to migrate to Office 365? Contact us: info@granikos.eu

Updates

Update 2020-10-05: Fetch all remote SMTP servers from Exchange receive connector logs added
Update 2020-05-25: TechNet Gallery links removed due to end of TechNet Gallery in mid-2020
Update 2020-02-07: Report for enabled client protocols, Exchange Environment Report - v2, Set thumbnailPhoto for AzureAD guest users added
Update 2019-05-07: Export mailbox delegates and SMTP forwarding information added
Update 2018-09-04: Add remote IP-address ranges to a receive connector added
Update 2018-06-16: Manage Master Category List for Shared Mailboxes and Teams added
Update 2018-04-29: Convert Word documents using PowerShell and Set Mailbox Item Private Flag added
Update 2018-01-24: Create a new Room Mailbox with Security Groups added
Update 2017-11-11: Export all user mailbox permissions added
Update 2017-09-22: Remove Out-Of-Office rules from user mailbox added
Update 2017-05-20: Parse email messages content for further processing and Update OWA vDir config across multiple servers added
Update 2017-03-18: Fetch recently created public folders and Clear Private Flag on Mailbox Messages added
Update 2017-02-22: Remove Orphaned HealthMailbox and SystemMailbox Accounts from MESO Container added
Update 2017-02-17: Test Office 365 Domain Availability added
Update 2017-02-13: Connect to Exchange Server 2013+ using remote PowerShell added
Update 2017-02-07: Create Exchange internal/external Url based certificate requests, Create a scheduled task for Exchange Server 2013 added
Update 2017-01-24: Gather Exchange Configuration Data added
Update 2017-01-05: Export Messages from Transport Queue added
Update 2016-11-29: Clean legacy public folder ACL added, Scripts categorized
Update 2016-11-28: Add multiple legacy public folder replicas added
Update 2016-08-18: Simple import of multiple PST files for a single user added
Update 2016-07-28: Change IIS Log File settings Github Url added, Create a new Team Mailbox with Security Groups added
Update 2016-06-04: GlobalFunctions added
Update 2015-06-18: Copy-ReceiveConnector updated
Update 2015-06-01: Exchange 2010 Public Folder Replication Report (UTF8 support)
Update 2015-05-21: Copy anti-virus pattern to Exchange 2010/Exchange 2013 servers added
Update 2014-12-10: Copy a receive connector from one Exchange Server to multiple Exchange Servers added

Am 19. November traf sich die Exchange User Group in einem Microsoft Teams Meeting. 

Die Themen waren

• Exchange Server vNEXT - Thomas Stensitzki
  • Was erwartet uns mit der nächsten Version von Exchange Server?
• Änderungen in der Exchange User Group - Evgenij Smirnov / Thomas Stensitzki
  • Nicht nur ein neues Logo, auch der Scope der EXUSG ändert sich
• Exchange Server & Outlook Cabaret - Evgenij Smirnov / Thomas Stensitzki
  • Exchange Server und Outlook Worst Practices  

Die Exchange User Group erweitert ihren Fokus von Berlin auf den deutschsprachigen Raum. Meetups werden, wie bisher, in Berlin abgehalten. Die Planung ist, in der Zukunft hybride Meetups abzuhalten. Weitere Details hierzu gibt es dann auf der Homepage der Exchange User Group.

Dies ist die Präsentation zu Exchange Server vNEXT und den Änderung in der Exchange User Group.

Links

• Präsentation
• Homepage der Exchange User Group
• Exchange User Group bei Twitter

Problem

While trying to synchronize a new device with an Exchange mailbox, you receive an error with your new mobile phone partnership.

The Exchange Server 2010 Default Throttling Policy is configured to accept 10 ActiveSync devices per mailbox only.

You can validate this setting by using EMS

Get-ThrottlingPolicy def* | Select Name,EASMaxDevices

Solution

Use a scheduled PowerShell script to delete old ActiveSync Device partnerships that have not been used for a defined period of time.

Script

Find the most recent version on TechNet Gallery and Github, following the links provided in the Links section.

Modifiy the script path variables to fit your requirements. The variables are configured in the ### BEGIN Variables section.

Steps being executed:

1. Fetch all user mailboxes
2. Iterate through each user mailbox and determines the number of ActiveSync devices and the number of devices which have not synchronized since 150 days
3. Delete ActiveSync device registration, if a user has more than 4 devices in total and a minimum of 1 device that have not synced within 150 days

<#
    .SYNOPSIS
    Remove Exchange Server 2010 ActiveSync Device Partnerships 
   
   	Sebastian Rubertus / Thomas Stensitzki
	
	THIS CODE IS MADE AVAILABLE AS IS, WITHOUT WARRANTY OF ANY KIND. THE ENTIRE 
	RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS CODE REMAINS WITH THE USER.

    Send comments and remars to: support@granikos.eu
	
	Version 1.0, 2015-04-09
 
    .LINK  
    More information can be found at http://www.rubertus.net/Blog/tabid/85/EntryId/41/Scripted-removing-of-ActiveSync-Device-Partnerships.aspx 
	
    .DESCRIPTION

    THis script removes ActiveSync device association from user mailboxes
    that have been inactive for more than 150 days.

    .NOTES 
    Requirements 
    - Exchange Server 2010
    - Windows Server 2008 R2 SP1, Windows Server 2012 or Windows Server 2012 R2  

    Revision History 
    -------------------------------------------------------------------------------- 
    1.0     Initial community release 
    
    .EXAMPLE
    Remove-ActiveSyncDevicePartnership
    	
    #>

### BEGIN SnapIns -------------------------------------------------------------

# Add Exchange SnapIn if not already loaded
if ( (Get-PSSnapin -Name Microsoft.Exchange.Management.PowerShell.E2010 -ErrorAction SilentlyContinue) -eq $null )
{
    Add-PsSnapin Microsoft.Exchange.Management.PowerShell.E2010 -ErrorAction SilentlyContinue
   
    if ( (Get-PSSnapin -Name Microsoft.Exchange.Management.PowerShell.E2010 -ErrorAction SilentlyContinue) -eq $null )
    {
        Write-Host "Microsoft.Exchange.Management.PowerShell.Admin could NOT be loaded!" -ForegroundColor Red
        Write-Host "Verify that the Exchange 2010 Management is installed on this computer!" -ForegroundColor Red
    }
}

### END SnapIns ---------------------------------------------------------------

### BEGIN Variables | EDIT ACCORDING TO YOUR NEEDS ----------------------------

# ScriptPath
$scriptPath = "C:\Scripts\Remove-ActiveSync-Devices\"

# Logfile
$logfile = "C:\Scripts\Remove-ActiveSync-Devices\Logs\$(get-date -format yyyy-MM-dd___HH-mm-ss)___Logname.log"

### END Variables -------------------------------------------------------------


### BEGIN Functions -----------------------------------------------------------

Function Log
{
   Param ([string]$logstring)
   Add-content $logfile -value "$(get-date -format yyyy-MM-dd___HH-mm-ss) $logstring "
}

### END Functions -------------------------------------------------------------

### BEGIN Main ----------------------------------------------------------------

# Create a new log file
Write-Host
Write-Host "Script started, creating Log File."
Log "Script started."
Write-Host

# Query User Mailboxes and Device Statistics
Write-Host "Querying User Mailboxes, please wait a few seconds..." -ForeGroundColor green
Log "Querying User Mailboxes."
Write-Host
$Mailboxes = Get-Mailbox -RecipientTypeDetails UserMailbox -ResultSize Unlimited -WarningAction SilentlyContinue
$NumberOfMailboxes = $Mailboxes.count
Write-Host "Number of Mailboxes: $NumberOfMailboxes "
Log "Number of Mailboxes: $NumberOfMailboxes "
Write-Host

# Iterate each User Mailbox
ForEach ($Mailbox in $Mailboxes)
{
    $MailboxAlias = $Mailbox.Alias
    Write-Host
    Write-Host "================================================================================="
    Write-Host
    Write-Host "Getting ActiveSync Devices from user $MailboxAlias..."
    Log "Getting ActiveSync Devices from user $MailboxAlias. "
    $AllDevicesFromSpecificUser = Get-ActiveSyncDevice -Mailbox $MailboxAlias -Result Unlimited  -WarningAction SilentlyContinue | Get-ActiveSyncDeviceStatistics -WarningAction SilentlyContinue
    $AllDevicesFromSpecificUserNotSynchronizedSince150Days = Get-ActiveSyncDevice -Mailbox $MailboxAlias -Result Unlimited  -WarningAction SilentlyContinue | Get-ActiveSyncDeviceStatistics  -WarningAction SilentlyContinue | Where {$_.LastSuccessSync -le (Get-Date).AddDays("-150")}
    Write-Host
    $CountAllDevicesFromSpecificUser = $AllDevicesFromSpecificUser.Count
    $CountAllDevicesFromSpecificUserNotSynchronizedSince150Days = $AllDevicesFromSpecificUserNotSynchronizedSince150Days.Count
   
    If ($CountAllDevicesFromSpecificUser -lt 5)
    {
        Write-Host "User $MailboxAlias has only $CountAllDevicesFromSpecificUser ActiveSync Devices. Nothing to delete!" -ForegroundColor Green
        Log "User $MailboxAlias has only $CountAllDevicesFromSpecificUser ActiveSync Devices. Nothing to delete!"
    }
   
    If (($CountAllDevicesFromSpecificUser -gt 4) -and ($CountAllDevicesFromSpecificUserNotSynchronizedSince150Days -gt 1))
    {
        Write-Host "User $MailboxAlias has $CountAllDevicesFromSpecificUser devices. $CountAllDevicesFromSpecificUserNotSynchronizedSince150Days have not synced for more than 150 days." -ForegroundColor Red
        Log "User $MailboxAlias has $CountAllDevicesFromSpecificUser devices. $CountAllDevicesFromSpecificUserNotSynchronizedSince150Days have not synced for more than 150 days."
       
        ForEach ($Device in $AllDevicesFromSpecificUserNotSynchronizedSince150Days)
        {
            $DeviceType = $Device.DeviceType
            $DeviceFriendly = $Device.FriendlyName
            $DeviceID = $Device.DeviceID
            $DeviceFirstSyncTime = $Device.FirstSyncTime
            $DeviceLastSuccessSync = $Device.LastSuccessSync
            Write-Host
            Write-Host "ActiveSync Device 2 delete Properties: "
            Write-Host "-------------------------------------- "
            Write-Host "Type         : $DeviceType "           
            Write-Host "Friendly Name: $DeviceFriendly "
            Write-Host "ID           : $DeviceID "
            Write-Host "Last Sync    : $DeviceLastSuccessSync " -ForegroundColor Red
            Log "Removing Device $DeviceType with ID $DeviceID ..."
            Write-Host
            Write-Host "Removing Device $DeviceID ..." -ForegroundColor Red
            $Device | Remove-ActiveSyncDevice -WarningAction SilentlyContinue
        }
    }
}

# Script finished
Write-Host
Write-Host "Script finished!"
Write-Host
Log "Script finished!"

### END Main ------------------------------------------------------------------

Links

• Remove-ActiveSyncDevicePartnership Script at TechNet Gallery
• Remove-ActiveSyncDevicePartnership Script at GitHub

You need assistance with your Exchange Server setup? You have questions about your Exchange Server infrastructure and going hybrid with Office 365? Contact us at office365@granikos.eu or visit our website http://www.granikos.eu.

Am 23. Januar 2020 findet das erste Treffen der Exchange User Group in diesem Jahr statt.

Wir treffen uns in den Räumlichkeiten der COMPAREX AG.

Agenda

• Neues aus der Community
• Ist meine Server gesund? Gesundheit eines Exchange Servers zuverlässig bewerten - Evgenij
• Pause und Snacks
• Die Zukunft von Exchange Server On-Premises - Was passiert nach 2025?
• Networking und Austausch

Die Anmeldung zur unseren Meetup ist hier möglich: https://www.meetup.com/de-DE/EXUSG-DE/events/266646039/. 

• Ort: COMPARX AG - A SoftwareONE Company
  Rudower Chaussee 13, Berlin
• Tag: 23. Januar 2020
• Zeit: 18:00 Uhr
• Weitere Informationen und Anmeldung 
   

Wir sehen uns.