#weekittip — Public Fediverse posts

I'm currently in a community event from Workplace Ninjas Denmark https://www.meetup.com/wpninjasdk/events/312783505/rsvp/ And they are obviously speak a lot of Danish, which NOT the same as Dutch 😉

But thanks to the #MicrosoftTeams Live Caption with Translation I can follow it pretty good. You or the organizer do require a Teams Premium or M365 Copilot license https://support.microsoft.com/en-us/office/use-live-captions-in-microsoft-teams-meetings-4be2d304-f675-4b57-8347-cbd000a21260#setuptranslatedcaptions #WeekITtip #Microsoft365

I trained myself to use the UPN above the down level (samaccountname) format e.g username@domain,com vs domain\username. But there have been a few times when authentication failed because I used the wrong one. Be sure to try the other format before diving further in troubleshooting #WeekITtip #Microsoft

The biggest gain is achieved by changing your default domain and checking existing objects. In addition, the default DKIM signing domain is often the MOERA domain. Take a moment to properly configure each custom domain as well, enhancing #security.

Read more here for a more detailed explanation and how to monitor the use of MOERA domains: https://techcommunity.microsoft.com/blog/exchange/limiting-onmicrosoft-domain-usage-for-sending-emails/4446167?WT.mc_id=M365-MVP-5000976

#WeekITtip #MSExchange #Microsoft365

Last week #Microsoft announced an important change throttling #MSExchange Online outbound mail using *.onmicrosoft.com, or MOERA (Microsoft Online Exchange Routing Address). This is done to limit malicious\unsolicited mails from trail tenants, which is indeed a problem.

The impact for organizations using custom domains is limited. However, orgs might not be aware that some non-user objects use MOERA domains per default (i.e. Booking app, notifications etc.).

#WeekITtip #Microsoft365 #Security

In any case, if you still have or use Lens: time to look for alternatives that suit your needs. I think there are better options than the M365 Copilot, for me native iPhone is adequate. Especially with OCR built-in.

Read more here: https://mc.merill.net/message/MC1131064
Admin M365 MC: https://admin.microsoft.com/ref=MessageCenter/:/messages/MC1131064
#WeekITtip #Microsoft365

It makes me sad as a was a avid user during conferences to get photos of projected slides unskewed and suitable for social media. To be fair, I haven't used Lens probably since 2019, the last year I went to a lot of conferences. After that a lot of hybrid conferences and (pre-)shared slidedecks limited the need for photos or live tweeting for that matter.
#WeekITtip #Microsoft365

This #Microsoft365 Message Center #MC1131064 hurt a little: Microsoft Lens app will retire. Starting this September in phases and concluding on 15 December 2025. The replacement app is the Microsoft365 Copilot app, although it certainly does not have feature parity with Lens.

#WeekITtip #Microsoft365

If you are responsible for your orgs mail infrastructure, definitely read this post and evaluate the impact of disabling Direct Send: https://techcommunity.microsoft.com/blog/exchange/direct-send-vs-sending-directly-to-an-exchange-online-tenant/4439865?wt.mc_id=M365-MVP-5000976

#WeekITtip #Security #SMTP #Mail #Microsoft365

Direct Send is defined as your organization sending mail to #MSExchange Online using a sender domain that is an accepted domain AND which is not send via any authentication (user or via Connectors). In some cases you might require this functionality, however this obviously can open your organization up to receive spoofed mails. Those should be filtered, but depending on the complexity the ability to disable Direct Send is a welcome option.

#WeekITtip #Security #SMTP #Mail #Microsoft365

Recently the #MSExchange product group posted an article on disabling #SMTP Direct Send and after feedback reposted it with some additional clarifications because there were some misconceptions on the definition. I have had similar discussions with organizations. It depends on your configuration what the impact might be, but IMHO it is a welcome option to reduce your attack surface but you obviously need to understand it correctly.

#WeekITtip #Security #SMTP #Mail #Microsoft365

Spent some useful time digging into an IETF #RFC regarding Certificate Authority Authorization or #CAA (RFC6844 https://www.rfc-editor.org/rfc/rfc6844 ) *and* checking security guidelines on the use of specific cipher suites because the Dutch National Cyber Security Center (#NCSC) recently released new TLS guidelines. https://www.ncsc.nl/wat-kun-je-zelf-doen/documenten/publicaties/2025/juni/01/ict-beveiligingsrichtlijnen-voor-transport-layer-security-2025-05

#Security is never dull 😀

#WeekITtip

Reading #WeekITtip for the weekend. I am currently involved in a case in which mail (auto)forwarding is used but that is causing the forwarded mail to be rejected. When #SPF, #DKIM and #DMARC are implemented properly, this can break legitimate mail forwarding.

#SimplifyNow #MSExchange #SMTP

So, I've started a new blog site. Consider this a soft launch, I still need to quite a lot of customizations. But I wanted to get this out in the world. I'll probably post a lot about #Microsoft #Exchange #SMTP #Microsoft365 and related topics. Bookmark https://davestork.nl !

#WeekITtip #SimplifyNow

PSA: There seem to be networking issues in the #Microsoft #Network in North & West-Europe region. It's affecting #Azure and #Microsoft365 services. See for status:
https://azure.microsoft.com/en-us/status/ and MO842351 in the M365 Admin portal.

#WeekITtip #SimplifyNow

Starting to implement Inbound #DANE in my #MSExchange #Microsoft365 tenant. First, lowering TTLs & setting #MTA-STS to Test. Now wait!

See the blog from #Microsoft here: https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-public-preview-of-inbound-smtp-dane-with-dnssec-for/bc-p/4194057#M39364

Read my thought about this here: https://www.linkedin.com/posts/dmstork_microsoft-dane-exchange-activity-7219386721304547328-87P1

#WeekITtip #SimplifyNow

And with every big #Microsoft event such as #MSBuild, there is a Book of News or #BoN that summarizes the biggest announcements which aren't only for developers. Ideal if you don't have the time to attend any sessions. You can find it here: https://news.microsoft.com/build-2024-book-of-news/

#WeekITtip #SimplifyNow

In this week's #WeekITtip I share my thoughts about why I am excited about #MicrosoftPlaces and its Public Preview. Read more on my #LinkedIn profile page https://www.linkedin.com/in/dmstork/

#WeekITtip #SimplifyNow #Microsoft365 #MicrosoftTeams #MSExchange

Well, I can now finally talk about the near future of #Exchange as #Microsoft just published their product roadmap for #Exchange Server! And Exchange Server "vNext" now has a name: Exchange Server Subscription Edition or SE.
Read more details here: https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-roadmap-update/ba-p/4132742

I talk a bit more in-depth about #MSExchange Subscription Edition on my #LinkedIn profile page: https://www.linkedin.com/in/dmstork/

#WeekITtip #SimplifyNow

There's been a new #WeekITtip, this time it's about some misconceptions surrounding the state of New #Outlook. Read more here: https://www.linkedin.com/posts/dmstork_mvpsummit-weekittip-outlook-activity-7179515790725939200-APtE?utm_source=share&utm_medium=member_desktop
Check for more helpful tips the LinkedIn tag #WeekITtip and/or #SimplifyNow: https://www.linkedin.com/feed/hashtag/?keywords=weekittip and https://www.linkedin.com/feed/hashtag/?keywords=simplifynow
#Microsoft365

Sending a mail you shouldn't have sent or used the Reply-All button by mistake.. It happens to the best of us. Yes, that includes me 🤫. Read my post on #LinkedIn on a #MSExchange feature you might have missed! Check https://www.linkedin.com/in/dmstork/ and tags #WeekITtip #SimplifyNow

New year, new #WeekITtip (with a bit of a delay)!

Did you know Google and Yahoo are going to be stricter with unauthenticated mails from 1 februari?

Google: https://blog.google/products/gmail/gmail-security-authentication-spam-protection/
Yahoo: https://senders.yahooinc.com/best-practices/

Especially tend to 3rd-party services you might use. In recent days I've seen a lot of requests to implement DNS changes. Sadly, often the bare minimum.

So, again a little help on the fundamentals of mail authentication: https://www.youtube.com/watch?v=gc58wubizx0&t=70s

#WeekITtip #SimplifyNow #MVPBuzz

Hey, instead of doing a weekly #WeekITtip I'm currently doing an #ITadvent tip every day until Christmass! I'm posting those on #LinkedIn. Today's tip is about Outlook COM going away in favor of web add-ins. Check out: https://www.linkedin.com/in/dmstork/recent-activity/all/

#ITAdvent #WeekITtip #SimplifyNow

Now that #MSIgnite is behind, the real journey begins with learning about all the newly announced features, capabilities, and technology. One way to learn this massive amount of information is to do one or more #Microsoft Cloud Skills Challenge. You also might win a ticket for #MSIgnite 2024: win win! Find a suitable topic and register in this list here: https://aka.ms/IgniteCSC?ocid=ignite23_csc_M365-MVP-5000976

#WeekITtip #SimplifyNow

It's #MSIgnite 2023 time! Or should I say #msAIgnite ? 🤓 There will be a lot of announcements and as usual #Microsoft has released the #BookOfNews which contains the most important announcements. Read up here! https://news.microsoft.com/ignite-2023-book-of-news/

You can still register! There are tons of virtual and/or recorded sessions you can watch even after #MSIgnite. Register here: https://register.ignite.microsoft.com/

#WeekITtip #SimplifyNow

Mail or SMTP is a protocol that was not developed with a security-by-design mindset. There are a lot of additional protocols needed to make it safe. But is it safe enough? Read my thoughts on LinkedIn:
https://www.linkedin.com/posts/dmstork_smtp-spf-dkim-activity-7127980685541138434-I11-?utm_source=share&utm_medium=member_desktop
#WeekITtip #SimplifyNow #FoodForThought

Sometimes you have take a break or step back and give your thoughts a bit more time. That is what I'm going to do after this week, so that means no #WeekITtip this week.

Or is this the #WeekITtip? 🤔 😉

In any case, good weekend to you all!

#WeekITtip #SimplifyNow

While #MSExchange remains a core solution in many organizations, the use of #Exchange Web Servers (#EWS) is being replaced by #Microsoft #Graph. It is important to assess whether EWS is still being used and act if necessary.

The Exchange Product Group has published a series of blogs to help with this migration. Check out the first introductory blog here: https://techcommunity.microsoft.com/t5/exchange-team-blog/ews-exchange-web-services-to-microsoft-graph-migration-guide/ba-p/3957158

#WeekITtip #SimplifyNow

Authenticate your outgoing mail! #Google has posted new guidelines on servers that send mail to their systems. In short: if you do not have #SPF, #DKIM and #DMARC correctly setup they might quarantine or block your mail!

Check those requirements here: https://support.google.com/mail/answer/81126
If you need a refresher, check my Microsoft Exchange Community video here: https://www.youtube.com/watch?v=gc58wubizx0&t=80s

#WeekITtip #SimplifyNow

This is something I've been eager to implement! March 2024 Inbound #DANE will finally start in Public Preview for #MSExchange Online. In short, with DANE sending and receiving mail environments now can verify the server is indeed correct and mitigate Adversary-in-the-Middle attacks. This is something Opportunistic TLS won't protect against.

Definitely prepare! More info: https://techcommunity.microsoft.com/t5/exchange-team-blog/implementing-inbound-smtp-dane-with-dnssec-for-exchange-online/ba-p/3939694

#WeekITtip #SimplifyNow

In March 2023 #Microsoft announced that #Exchange Online is going to throttle and block mail from unsupported #MSExchange Server versions in specific situations. There was a delay, but this week they published an updated timeline. Take note if you still have unsupported Exchange servers in your network. Get rid of them!

Info: https://techcommunity.microsoft.com/t5/exchange-team-blog/update-on-transport-enforcement-system-in-exchange-online/ba-p/3827774

#WeekITtip #SimplifyNow

Een van mijn pet-peeves is #lifecyclemanagement: het proces waarbij men als organisatie onder meer de support lifecycle van alle gebruikte producten in kaart heeft en er *tijdig* vervanging/upgrades worden gepland en uitgevoerd.

De volgende belangrijke is #Windows Server 2012 (R2) waarvan de Extended Support op 10 oktober 2023 verloopt.

Als je nog geen plannen had, BEGIN DAAR DAN NU MEE! Lees hier de opties: https://learn.microsoft.com/en-us/lifecycle/announcements/windows-server-2012-r2-end-of-support

#WeekITtip #SimplifyNow