Granikos Technology Blog

Microsoft bietet für Kunden und Cloud-Interessenten eine Vielzahl an Quellen mit Information zu Office 365, Microsoft Azure, Microsoft Dynamics Online, Sicherheit und Compliance.

Die nachfolgenden Links stellen eine Übersicht der wichtigsten Quellen dar.

• Office 365 Trust Center (DE) | Link zur Webseite
  Das Office 365 Trust Center ist die erste Anlaufstelle für Compliance Informationen zu Office 365. Hier finden sowohl Informationen zur Planung des Datenschutzes in Ihrem Unternehmen, wie auch Informationen zum Datenschutz und Sicherheitsprozessen in Office 365. Das Angebot ist sehr umfassend.
  
   
• Microsoft Trust Center (EN) | Link zur Webseite
  Das englischsprachige Trust Center von Microsoft bietet noch weitere Informationen zum Thema Datensicherheit in der Cloud. Hier werden zusätzlich zu Office 365 die folgenden Produkte behandelt: Microsoft Azure, Microsoft Dynamics AX, Microsoft Dynamics CRM Online und Microsoft Intune.
  
   
• Where is my data? | Link zur Webseite
  Diese anschauliche Website zeigt in einer geografischen Übersicht, in welchen Rechenzentren sich Kundendaten für eine bestimmte Region befinden.
  
   
• Service Trust Portal | Link zur Webseite
  Im Service Trust Portal haben Abonnenten des Microsoft Cloud Service die Möglichtkeit, auf Audit- und Complianceberichte und "Trust Documents" zuzugreifen. Hierzu zählen:
  • Auditing and Reporting in Office 365
  • Data Encryption Technologies in Office 365
  • Defending Office 365 Against Distributed Denial-of-Service Attacks
  • ISO 27001 (2013) and ISO 27018 (2014) Aligned FAQ
  • Microsoft Security Policy
  • Office 365 Customer Security Considerations - Workbook
  • Office 365 Customer Security Considerations Reference Guide - Use with the workbook
  • Office 365 ISO 27001 and 27018 Assessment Report 2014
  • Office 365 Mapping of CSA Cloud Control Matrix
  • Office 365 Risk Management Lifecycle
  • Office 365 Security Assessment Summary
  • Office 365 Security Incident Management
  • Tenant Isolation in Office 365
     
• Evolving Data Loss Prevention in SharePoint Online/OneDrive for Business and Office applications | Link zur Webseite
  Dieser Blog Artikel beschreibt in einem Kurzüberblick die Möglichkeiten von DLP Richtlinien für SharePoint Online und deren Auswirkungen auf die Office Suite
  

Sie vermissen eine Information zu Office 365 oder Microsoft Azure? Wir helfen Ihnen, die gewünschte Information zu finden.

Bei Fragen zum Thema Office 365 und Microsoft Cloud können Sie sich gerne an unser Cloud-Team wenden. Senden Sie uns bequem eine E-Mail an office365@granikos.eu

Microsoft hat in der Office Suite Änderungen für die sichere Multi-Faktor Authentifizierung (MFA) vorgenommen. In diesem Webinar unseres Partners ENow wird gezeigt, wie Sie die aktuellen MFA-Funktionen nutzen können, um den Zugriff auf Exchange Server und Skype for Business Server abzusichern. Die unterschiedlichen Möglichkeiten für Exchange und Skype for Business werden diskutiert und welche Planungsvoraussetzungen notwendig sind, um ein erfolgreiches MFA-Deployment durchzuführen.

Termin

• 23. Februar 2016
• 19 Uhr (CET), 10 Uhr (PST)
• Anmeldung zum Webinar

Sprecher

A structural engineer by education, Bhargav Shukla discovered his attraction to computers during his computer technology education at college. The choice was clear when he had to choose between a Masters in Civil Engineering and a Microsoft Certified Systems Engineer certification. The rest is a blur. Over the past 20 years, he has amassed experience with multiple products and platforms, including Microsoft Lync, Microsoft Exchange and other Microsoft and non-Microsoft platforms. He holds the prestigious Microsoft Certified Master certification in Lync Server, Microsoft Certified Solutions Master (MCSM) certification in Exchange 2013 and is a current Microsoft Most Valuable Professional (MVP). Bhargav currently works at KEMP Technologies as Director of Technology for Strategic Alliances. He is also a founder of and active contributor to the Philadelphia UC User Group.

The use of certificate-based email encryption is still a challenging task for administrators. When you store end-user certificates stored locally on computers, you accept the risk of the user certificates being deleted or overwritten unintentionally.

The use of smart cards helps to mitigate the risks associated with locally stored certificates. But smart cards are too complicated for large and agile companies. The use of smart cards with mobile devices is even more complicated, if not impossible.

Gateway Encryption

A simple and reliable solution is to use encryption and decryption capabilities at the company email gateway(s). This approach allows for:

• Central management of user and domain certificates or keys
  • S/MIME
  • PGP
• Central management of digital signage and encryption parameters for email communication with partner companies
• Encryption of any outgoing email communication regardless of the client used to compose the message:
  • Outlook
  • OWA
  • Outlook on the web
  • Mobile phone
  • Tablet Application
• Usage of internal eDiscovery solutions as internally stored email communication is still searchable
• No lost user certificates anymore

Besides the option to import certificates manually, the real benefit is provided by automatic certificate provisioning. By using a certificate authority company account the gateway solution handles certificate requests automatically.

The supported S/MIME certificate authorities are:

• D-TRUST
• GlobalSign
• SwissSign

NoSpamProxy by Net at Work is a gateway solution proving this set of features for on-premise SMTP messaging infrastructures.

Office 365

The advantages provided by NoSpamProxy can be used with Office 365 as well. There is no need to have an Exchange Hybrid configuration ins place to benefit from the NoSpamProxy features. The NoSpamProxy gateway can be configured for the use with Office 365 cloud-only tenants.

The following picture illustrates how NoSpamProxy gateway is integrated into such a scenario.

External emails are received by the local NoSpamProxy Gateway server and not by Exchange Online (1). The NoSpamProxy gateway handles the messages and sends the messages to Office 365 using an Office 365 connector (2). Outgoing messages to external recipients are sent to the on-premise NoSpamProxy gateway using a dedicated Office 365 Send Connector (3). The NoSpamProxy gateway handles the messages and sends the messages to the external recipients.

Multiple NoSpamProxy gateway servers can be deployed for a redundant setup.

NoSpamProxy

The NoSpamProxy gateway solution provides more than just S/MIME or PGP encryption capabilities. NoSpamProxy is a robust fully-fledged anti-spam solution that rejects spam emails legally compliant. Each message that is not fully received by the company does not need to be archived.

NoSpamProxy features:

• Legally compliant spam protection
• Legally compliant email communication using digital signage
• Protected email communication using password-protected PDF attachments
• Large attachment support by using a dedicated we portal
• Geographically dispersed gateways with central management

Want to know more about all NoSpamProxy features?
Not yet an Office 365 customer, but keen to know more about gateway-based encryption and a reliable anti-spam solution?

Get to know more about NoSpamProxy here.

Das Exchange Blog Cumulative Update für Januar 2016 (CU0116) fasst interessante Themen rund um Exchange Server und Office 365 (Exchange Online), Azure und Skype for Business (aka Lync) des Monats Januar 2016 zusammen.

Exchange Server

• Mailbox Anchoring affecting new deployments & upgrades
  https://exchangemaster.wordpress.com/2016/01/06/mailbox-anchoring-affecting-new-deployments-upgrades/
• Exchange Receive Connector and the Custom Permissions Group
  https://www.granikos.eu/de/justcantgetenough/PostId/163/exchange-receive-connector-and-the-custom-permissions-group
• Turn Exchange Anonymous Relay On or Off with Toggle-ExternalRelayReceiveConnectors.ps1
  http://www.expta.com/2016/01/turn-exchange-anonymous-relay-on-or-off.html
• There is no existing PublicFolder that matches the following Identity
  https://www.granikos.eu/de/justcantgetenough/PostId/166/there-is-no-existing-publicfolder-that-matches-the-following-identity
• Exchange Analyzer v0.1.0-Beta.1 Released
  http://exchangeserverpro.com/exchange-analyzer-v0-1-0-beta-1-released/
• Reporting on Folder Retention Tag Statistics Exchange 2010-2016
  http://gsexdev.blogspot.de/2016/01/reporting-on-folder-retentiontag.html
• Configure Kemp Load Balancer for Exchange 2016
  https://supertekboy.com/2015/11/17/configure-kemp-load-balancer-for-exchange-2016/
• Fraud against Exchange UM. Protect yourself now!
  http://www.tobiefysh.co.uk/2016/01/fraud-against-exchange-um-protect.html
• Clear AutoDiscover Cache
  https://www.granikos.eu/de/justcantgetenough/PostId/169/clear-autodiscover-cache
• Create an Outlook 2016 profile that has no email accounts for troubleshooting connection issues
  http://blogs.technet.com/b/outlooking/archive/2016/01/28/create-an-outlook-2016-profile-that-has-no-email-accounts-for-troubleshooting-connection-issues.aspx

Office 365 & Exchange Online

• [STICKY] Office 365-Trust Center
  http://bit.ly/Office365TrustCenter
• [STICKY] Office 365 URLs and IP address ranges
  http://bit.ly/Office365URLsIPaddresses
• New Video: The Best EMS Overview Available
  http://blogs.technet.com/b/in_the_cloud/archive/2016/01/05/new-video-the-best-ems-overview-available.aspx

Skype for Business, Lync Server & Communication

• One Click send Skype for Business / Lync 2013 SIP-Stack log to Administrator
  http://lyncdude.com/2016/01/05/one-click-send-skype-for-business-lync-2013-sip-stack-log-to-administrator/
• Powershell script interface to Skype for Business and Lync CDR and QoE data
  https://gallery.technet.microsoft.com/lync/Powershell-script-5fe0494a
• Lync 2013 / SfB 2015 Client Update ? January 2016
  https://greiginsydney.com/lync-2013-sfb-2015-client-update-january-2016/
• KEMP LoadMaster: Skype For Business Server 2015 load balancing configuration
  http://www.uctechnologist.uk/2016/01/kemp-loadmaster-skype-for-business-server-2015/

Microsoft Azure

• [STICKY] Microsoft Azure Trust Center
  http://azure.microsoft.com/en-us/support/trust-center
• Best way to connect to Office 365 and Azure AD (latest data) + Azure AD Connect Momentum
  http://blogs.technet.com/b/ad/archive/2016/01/05/best-way-to-connect-to-office-365-and-azure-ad-latest-data-azure-ad-connect-momentum.aspx
• Azure AD Mailbag: PowerShell tips and tricks
  http://blogs.technet.com/b/ad/archive/2016/01/08/azure-ad-mailbag-powershell-tips-and-tricks.aspx
• Step-by-Step: Connect your AWS and Azure environments with a VPN tunnel
  http://blogs.technet.com/b/canitpro/archive/2016/01/12/step-by-step-connect-your-aws-and-azure-environment-with-a-vpn-tunnel.aspx
• Closing the loop: The new Microsoft Cloud Networking for Enterprise Architects poster
  http://blogs.technet.com/b/solutions_advisory_board/archive/2016/01/13/closing-the-loop-the-new-microsoft-cloud-networking-for-enterprise-architects-poster.aspx
• Step-By-Step: Adding an Azure Subscription as an Endpoint in Visual Studio Team Services
  http://blogs.technet.com/b/canitpro/archive/2016/01/19/visual-studio-team-service-endpoint-how-to-correctly-add-your-azure-subscription.aspx
• Enabling the Azure Authenticator App for 2FA
  https://greiginsydney.com/enabling-the-azure-authenticator-app-for-2fa/

Allgemeine Themen & Sicherheit

• [STICKY] Microsoft Security TechCenter
  http://technet.microsoft.com/de-DE/security/dd252948
• DevOps Basics: Introduction to GitHub
  http://blogs.technet.com/b/canitpro/archive/2016/01/04/devops-basics-understanding-github.aspx
• Pre-wired access control
  http://www.wapshere.com/missmiis/pre-wired-access-control
• Navigating the Windows 10 Servicing Options
  http://blogs.technet.com/b/in_the_cloud/archive/2016/01/06/navigating-the-windows-10-servicing-options.aspx
• Here?s how to increase your online safety savvy in 2016
  http://blogs.microsoft.com/on-the-issues/2016/01/12/heres-how-to-increase-your-online-safety-savvy-in-2016/
• 7 Reasons Why Migrating Off SQL 2005 is a Good Idea
  http://blogs.technet.com/b/canitpro/archive/2016/01/14/9-reasons-why-migrating-off-sql-2005-is-a-good-idea.aspx
• Poor Outlook performance and Nagle?s algorithm
  https://ingogegenwarth.wordpress.com/2016/01/17/poor-outlook-performance-and-nagles-algorithm/
• Step-By-Step: Downgrading A Windows Server Domain and Forest Functional Level
  http://blogs.technet.com/b/canitpro/archive/2016/01/21/step-by-step-downgrading-a-windows-server-domain-and-forest-functional-level.aspx
• Simulating A Ransomware Attack With PowerShell
  http://blogs.technet.com/b/canitpro/archive/2016/01/28/simulating-a-ransomware-attack-with-powershell.aspx

Knowledge Base

• You can't join a meeting from outside Lync 2013, Lync 2010, or Skype for Business on iOS 9.2
  https://support.microsoft.com/en-us/kb/3126487
• Event sinks do not function correctly if the SystemMailbox{GUID} mailbox is absent from a mailbox store in Exchange Server 2003 or in Exchange 2000 Server
  https://support.microsoft.com/en-us/kb/316622

Replay

• Oktiber 2009: Breaking Change : The System Attendant mailbox has been removed from Exchange 2010
  http://blogs.msdn.com/b/dvespa/archive/2009/10/06/say-so-long-to-the-system-attendant-mailbox.aspx
• M?rz 2010: Virtual Hard Disk (VHD) Architecture explained
  http://blogs.technet.com/b/ranjanajain/archive/2010/03/23/virtual-hard-disk-vhd-architecture-explained.aspx
• M?rz 2015: Office 365 ? The Magic Behind The Hybrid Config Wizard (2013)
  http://blogs.perficient.com/microsoft/2015/03/office-365-the-magic-behind-the-hybrid-config-wizard-2013/
• Juni 2010: MSExchange ADAccess (DSAccess) errors and the ?Manage auditing and security? right
  http://blogs.technet.com/b/richardroddy/archive/2010/06/16/msexchange-adaccess-dsaccess-errors-and-the-manage-auditing-and-security-right.aspx

Podcast Empfehlungen

• Exchange Exposed
  http://bit.ly/ExchangeExposedPodcast

Tools

• Cloud Security Audit
• Mailscape 365 - Exchange Online Monitoring und Reporting
• Mailscape - Exchange Monitoring und Reporting
• Uniscope - Lync Monitoring und Reporting
• Compass - Active Directory Monitoring und Reporting
• ForeSite - SharePoint Monitoring und Reporting

Gerne unterstützen wir Sie bei der Planung und Durchführung Ihrer Exchange Server Implementierung oder Migration.

Sie denken über einen vollständigen Wechsel zu Office 365 oder eine Hybrid-Konfiguration mit Office 365 nach? Wir beraten Sie umfassend und ausführlich über die Möglichkeiten der Office 365 Plattform.

Sie möchten mehr über Exchange Server 2016 erfahren? Gerne erläutern wir Ihnen die technischen Änderungen und Möglichkeiten für Ihr Unternehmen in einem persönlichen Workshop.

Weitere Informationen zu unseren Dienstleistungen finden Sie auf unserer Website (https://www.granikos.eu) oder nehmen Sie direkt mit uns Kontakt auf: info@granikos.eu