PSA: Tuesday's Windows Server updates might create issues for Exchange server. A small post which gets updated as info gets disclosed at https://eightwone.com/2026/10/15/windows-server-patches-breaking-exchange/ #MSExchange
#msexchange — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #msexchange, aggregated by home.social.
-
Happy patch Tuesday everyone! October 2026 Security Updates for Exchange SE/2019/2016 are here. In case of Exchange 2019/2016, it will be their final SU https://eightwone.com/2026/10/13/security-updates-exchange-2016-se-oct2026/ #MSExchange
-
PSA: Exchange Server V2 Security Updates for September were published, additionally addressing CVE-2026-96940 https://eightwone.com/2026/10/03/v2-security-updates-exchange-2016-se-sep2026/ #MSExchange
-
Another month, another update of the most up-to-date set of books on Microsoft 365 for IT Pros is here with the October 2026 update
https://office365itpros.com/2026/10/01/microsoft-365-for-it-pros-136/
#Microsoft365 #Copilot #SharePoint #MSTeams #MSExchange #MSEntra -
Happy Patch Tuesday: Exchange Security Updates September 2026 (Exchange SE/2019/2016) arrived
https://eightwone.com/2026/09/08/security-updates-exchange-2016-se-sep2026/
#MSExchange -
Running non-Hybrid Exchange on-premises? MS is considering requiring a tenant for Free/Busy collaboration with peers in Exchange Online, driven by Cross-Tenant Access Policies in the post-EWS era. Product Group is looking for feedback
https://techcommunity.microsoft.com/blog/exchange/help-us-shape-exchange-server-on-premises-to-different-online-org-freebusy-after/4549691?WT.mc_id=M365-MVP-5000284 #MSExchange -
Announcing Microsoft 365 for IT Pros (2027 Edition)
https://office365itpros.com/2026/07/01/microsoft-365-for-it-pros
#Microsoft365 #MSExchange #Copilot #MSTeams #SharePoint #OneDrive #PowerPlatform #PowerApps #PowerAutomate #AI #Agents #MVPBuzz -
Happy Patch Tuesday: Exchange Security Updates June 2026 (Exchange SE/2019/2016) https://techcommunity.microsoft.com/blog/exchange/released-june-2026-exchange-server-security-updates/4524491?WT.mc_id=M365-MVP-5000284 #MSExchange
-
📢⚠️ China-linked #FamousSparrow hacking group targeted an oil and gas firm in #Azerbaijan using the ProxyNotShell exploit chain alongside Deed RAT and Terndoor malware across three persistent attack waves.
Read: https://hackread.com/famoussparrow-oil-gas-ms-exchange-server-exploit/
-
blog: Hotfix Update Exchange SE (May2026) & (re)run ConfigureExchangeHybridApplication to enable Graph-based rich coexistence workflows https://eightwone.com/2026/05/09/hotfix-update-exchange-se-may2026/ #MSExchange
-
The Exchange Deployment and Compliance Tool has been updated to 1.0.0.0; consult the Changelog for changes https://github.com/michelderooij/EDCA
For example, EDCA is now available from the PowerShell Gallery https://www.powershellgallery.com/packages/EDCA #MSExchange #Security #NIS2 #CIS #ANSSI #BSI #CISA #ISM #DISA -
So, I vibe-coded a thing: EDCA, your Exchange Deployment & Compliance Assessment tool. Read the blog for more info - preview , feedback much welcomed https://eightwone.com/2026/04/23/exchange-deployment-compliance-assessment/ #MSExchange #Security
-
Microsoft has announced Period 2 of the Exchange Server 2016/2019 Extended Security Update (ESU) program. This extension provides continued access to security updates for legacy on‑premises Exchange environments, but it should be viewed strictly as a temporary risk mitigation measure. While ESUs extend time, they do not extend safety nor help avoid inevitable #MSExchange https://xf.ms/Ex20192016ESU2
-
Almost time! Session ‘IAM and Exchange: Frenemies in Hybrid Organizations’ #MSExchange #Exchange #EntraID #Hybrid #ActiveDirectory #SMTP #MSExchangeSummit
-
Würzburg! I am in you!
Feel free to follow me on socials, and if you are here in person and have questions or want to talk: feel free to do so! (Unless I'm working on my deck 🤔😉) -
This week I'm taking time off from my projects at #Rubicon. Today I'm traveling and on Tuesday and Wednesday I will be joining my friends and peers at the Exchange Summit 2026 in Würzburg, Germany! I'll be talking about "IAM and Exchange: Untangling frenemies in Hybrid organizations". Follow me for updates!
#IAM #Identity #MSExchange #Hybrid #Entra #Microsoft365 #MVPBuzz #MSExchangeSummit
-
This Friday I will online speaking at Workplace Ninjas Denmark 2026 with the session "Mastering Mailflow: Strategies to Protect your Organization" in which I will cover key techniques and strategies that protect your organization's incoming and outgoing mail flow. A topic dear to my heart and is unfortunately something does not have the attention it should.
For more information and free registration: https://www.meetup.com/wpninjasdk/events/312783505/
-
Several hours ago the #MSExchange Team posted an update on the #SMTP AUTH Basic #Authentication timeline. To summarize: the original date of disabling the option of March 2026 is now delayed to H2 2027 for existing tenants. Newly created tenants will have to deal with this from December 2026.
-
The only "irritation" I have is that this is the third time something got changed by the Exchange Team HOURS before an important meeting on breaking changes deadlines. COME ON! 😁
-
Day 24 of #ITAdvent. And this concludes yet another run. I hope you found some usefull tips, I had a nasty cold so that might have had an impact. In any case, happy holidays and see you in the next year! And yes, I haven't forgotten that #MSExchange and Start-of-authority blog post ;-)
-
PSA: EWS block enforcement for Kiosk/Frontline SKUs has been moved back to the end of June https://xf.ms/NoEWSEnforced #MSExchange #Microsoft365
-
Day 12 of #ITAdvent. Short low effort self-plug as I'm a bit under the weather: I'll be speaking (in English) at the excellent in-person event Exchange Summit 2026 in Würzburg, Germany on 24/25 February 2026.
-
My topic? "IAM and Exchange: Untangling frenemies in Hybrid organizations". The relationship between Identities in Active Directory and Exchange has always tightly integrated, being hybrid made it more complex. I will discuss important IAM considerations designing, managing and moving away from AD.
More info: https://www.exchange-summit.de/ or https://www.linkedin.com/posts/msexchange-summit_exchangesummit-microsoftexchange-iam-activity-7403741450338725888-Zt_8
-
Day 4 of #ITAdvent. I always appreciated the idea of Zero-Hour Auto-Purge (ZAP): removing malicious retroactively increasing #security. It works for #MSExchange and #MicrosoftTeams messages, but you needed Defender for O365 Plan 2, but that changes with #MC1187837 https://mc.merill.net/message/MC1187837
-
Heads-up: EWS blockage for Exchange Online mailboxes with Kiosk/F1/F3 license, which officially do not offer EWS access, will be enforced March 2026 https://xf.ms/NoEWSEnforced #MSExchange
-
Anyway, on that Start-of-Authority for groups and #MSExchange attributes: Learned a lot of the little things, gotcha's and all. It's really something anyone with a #hybrid org transitioning to cloud-only needs to look into.
-
Finished a little project removing the last #MSExchange server together with flipping the Start-of-Authority of Group objects and Exchange Attributes. Had to use ADSIEdit to remove some Exchange stuff, made it a bit more interesting 🤓
-
PSA: Exchange Online Admin API (EWS replacement subset) now available (preview). REST-like alternative for some EWS scenarios, but not full REST replacement; cmdlets still recommended for full functionality https://techcommunity.microsoft.com/blog/exchange/announcing-public-preview-exchange-online-admin-api/4470562?WT.mc_id=M365-MVP-5000284 #MSExchange #EWS
-
Hybrid Exchange issues with Free/Busy? It's planned nudge day 3 of 3. Test-OAuthConnectivity likely shows 403 error, eg running (mix with) Exchange with pre-April patch levels. Affected? Act soon, permanent after EoM! https://bit.ly/ETOSecChanges #MSExchange
-
MS Exchange gibt es seit 1996. SMTP gibt es seit 1982. Microsoft adaptierte die Technologie und zwang Firmen ihre Server auf. Im Internet spielt #MSExchange kaum eine Rolle. Fast 90% sind Open Source. Exchange kennt man primär daher, wenn mal Probleme mit Mailservern auftreten. Und dann bekommt man kryptische Fehlermeldungen, die nicht-standard SMTP sind. Das Krisenmanagement der Landesregierung ist aber schlecht. Der Weg aber richtig. Weg vom Monopol hin zu Standards .
-
BTW: from October 1st new Accepted Domains will automatically use the new MX infrastructure, which will maken enabling DANE a little less of a hassle as there should be no change in your MX record. See MC1048624 or https://mc.merill.net/message/MC1048624
-
You must enable DANE on your domain as this change is currently only present on the new https://mx.microsoft infrastructure. Currently for existing accepted domains this is the way to transition to the new infrastructure, although eventually new accepted domains will use this automatically (you do still need to enable DNSSEC & DANE). See more on DANE here https://learn.microsoft.com/en-us/purview/how-smtp-dane-works?wt.mc_id=M365-MVP-5000976
-
Although for hosted services you do not have control over their certificate management, however I would find it reassuring if such a service would implement CAA. And: Since a few days #MSExchange Online now has CAA records!
-
With upcoming changes in the maximum validity period of certificates (max 200 days in 2026, 100 in 2027, 47 in 2029) the use of ACME (Automated Certificate Management Environment) will certainly increase. The addition of CAA and combination with ACME is another layer in your security stack. It's recommended for Dutch governments.
-
You all know I like to use the https://internet.nl internet standards test. Recently they added the Certificate Authority Authorization or CAA DNS record check. This record signals which Certificate Authority is allowed during the certificate request process and CA's should honor this record and only issue a certificate when it's listed.
-
The biggest gain is achieved by changing your default domain and checking existing objects. In addition, the default DKIM signing domain is often the MOERA domain. Take a moment to properly configure each custom domain as well, enhancing #security.
Read more here for a more detailed explanation and how to monitor the use of MOERA domains: https://techcommunity.microsoft.com/blog/exchange/limiting-onmicrosoft-domain-usage-for-sending-emails/4446167?WT.mc_id=M365-MVP-5000976
-
Last week #Microsoft announced an important change throttling #MSExchange Online outbound mail using *.onmicrosoft.com, or MOERA (Microsoft Online Exchange Routing Address). This is done to limit malicious\unsolicited mails from trail tenants, which is indeed a problem.
The impact for organizations using custom domains is limited. However, orgs might not be aware that some non-user objects use MOERA domains per default (i.e. Booking app, notifications etc.).
-
There are more similar changes already in preview and on the roadmap, but this is indeed a very big step in ending the era of maintaining an Exchange server “just because we sync our AD" and providing more flexibility in identity provisioning and governance.
-
This is big #MSExchange news! Today #Microsoft posted an article introducing the preview of the IsExchangeCloudManaged parameter in which you can shift the start-of-authority of Exchange attributes on hybrid identities from on-prem to cloud.
When enabled on a mailbox, you can manage synced identities mail properties directly in Exchange Online. Previously this was not possible and the reason you required an on-prem Exchange Server for management (or serverless with Management Tools).
-
New August 2025 #security update for #MSExchange! There are some vulnerabilities fixed, as of now not active in the wild but no reason to procrastinate. Small note: now AMSI HTTP Message body scanning will be enabled per default. Read more and find #Microsoft download links here: https://techcommunity.microsoft.com/blog/exchange/released-august-2025-exchange-server-security-updates/4441596?wt.mc_id=M365-MVP-5000976
-
Direct Send is defined as your organization sending mail to #MSExchange Online using a sender domain that is an accepted domain AND which is not send via any authentication (user or via Connectors). In some cases you might require this functionality, however this obviously can open your organization up to receive spoofed mails. Those should be filtered, but depending on the complexity the ability to disable Direct Send is a welcome option.
-
Recently the #MSExchange product group posted an article on disabling #SMTP Direct Send and after feedback reposted it with some additional clarifications because there were some misconceptions on the definition. I have had similar discussions with organizations. It depends on your configuration what the impact might be, but IMHO it is a welcome option to reduce your attack surface but you obviously need to understand it correctly.
-
New blog post: Why every organization should enable DANE https://davestork.nl/why-every-organization-should-enable-dane/
#security #SMTP #mail #MSExchange #Microsoft365 #DNSSEC #AzureDNS -
New malware called #GhostContainer has been spotted targeting high-profile organizations across Asia. Companies and individuals using #MSExchange worldwide should stay alert.
Read: https://hackread.com/new-ghostcontainer-malware-ms-exchange-servers-asia/
-
Start your in-place upgrade engines! #Microsoft #MSExchange Server Subscription Edition is now General Available! You've got 105 days left of 2016/2019 support! Go! Go! Go!
See the blog: https://techcommunity.microsoft.com/blog/exchange/exchange-server-subscription-edition-se-is-now-available/4424924?wt.mc_id=M365-MVP-5000976
#Microsoft365 #SMTP #Exchange -
for those unaware, corporate email since 2023 is utter bs because of #microsoft et al.
ofc, my boss switched us to cheapest #msexchange plan w. a third party who doesn't provide admin rights. he then told me to find a free solution to our web forms. the only free solution with ms is through azure api which fails to delivery 1/6 email?
sooo. uh, i cobbled together a functional workaround with #IT-ducttape. by using a free #gmail + gcloud api, and filter forward the forms to our corp emails lol.
-
There are still #MSExchange books being sold but be sure to check the most recent release. At least I know "Pro Exchange Administration" is relatively up to date: https://link.springer.com/book/10.1007/978-1-4842-9591-5 . For more #PowerShell focus the https://practicalpowershell.com books are an option (note: cocreator of those). For more general #Microsoft365 focus, I can recommend "Office 365 for IT pros": https://o365itpros.gumroad.com/l/O365IT which has monthly updates.
-
Third party sites might still have #MSExchange courses online, at least #Pluralsight has a few courses. CBTNuggets seems to still have a Certification preparation. But be aware that these courses may not be up to date anymore. You might find some YouTube channels, but I haven't checked myself.
-
Day 22 of #ITAdvent. There is no #Microsoft #MSExchange specific #certification available. Which unfortunately also means that there is less training offered, as they are based on Microsoft Official Courseware or #MOC. So, I sometimes see the question what options there are.
Obviously, #MicrosoftLearn sites were already a replacement for any books used during those MOCs. However, there is no Learning Path/Modules available that covers everything. https://learn.microsoft.com/en-us/training/browse/?expanded=m365&products=office-exchange-server%2Coffice-exchange-online
-
Day 20 of #ITAdvent. This week #Microsoft announced changes in the #MSExchange Online Message Trace capabilities. This is the tool you use to verify mail flow events; i.e. what happened to incoming or outgoing mail.
Previously you couldn't go further back then 10 days without the need of a downloadable report (which took time to process). Now you still have a max range of 10, but within the last 90 days. This is a very welcome change as this can speed up troubleshooting!