How to verify if Mailbox Auditing is enabled by Default on your Office 365 Tenant
| | |

How to verify if Mailbox Auditing is enabled by Default on your Office 365 Tenant

How to verify if Mailbox Auditing is enabled by Default on your Office 365 Tenant Started from January 2019, Microsoft turned on mailbox auditing by default for all Microsoft 365 organizations. This means that the certain actions like the following will be logged and can be viewed in the mailbox audit log. Mailbox owner Delegates…

Creating Office 365 Safe Links Policy and Rule using PowerShell
| | | | |

Creating Office 365 Safe Links Policy and Rule using PowerShell

Creating Office 365 Safe Links Policy and Rule using PowerShell To create a new Safe Links policy and rule a connection to Exchange Online Protection needs to be created. Establish a connection to Exchange Online Protection by doing the following. $UserCredential = Get-Credential $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.protection.outlook.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection…

Creating an Office 365 Safe Links Policy.
| | | | |

Creating an Office 365 Safe Links Policy.

Creating an Office 365 Safe Links Policy. Safe Links is part of Office 365 ATP (Advanced Thread Protection. Safe links can help an organization by providing a feature called time-of-click verification of web addresses (urls). So what does this mean? Safe link will scan urls in email messages as well as Office documents for any…

Create Office 365 Safe Attachments Policy and Safe attachment Rule using PowerShell
| | | | |

Create Office 365 Safe Attachments Policy and Safe attachment Rule using PowerShell

Create Office 365 Safe Attachments Policy and Safe attachment Rule using PowerShell To get started with creating the Safe attachment policy and safe attachment rule a connection to Exchange Online Protection needs to be established. To establish a connection to Exchange Online Protection (EOP), follow the below. $UserCredential = Get-Credential $Session = New-PSSession -ConfigurationName Microsoft.Exchange…

Configure the external postmaster address in Exchange Online
| |

Configure the external postmaster address in Exchange Online

Configure the external postmaster address in Exchange Online The external postmaster address is used to send notification messages to senders outside of your Exchange Online organisation. External senders are a sender with a domain that is not part of your accepted domain in your organisation. The default setting in Exchange Online for the postmaster address…

Office 365 Hybrid Emails Stuck in Queue: target host responded 421.4.4.1 connection timed out mail-onmicroosft.mail.protecion.outlook.com.
| | |

Office 365 Hybrid Emails Stuck in Queue: target host responded 421.4.4.1 connection timed out mail-onmicroosft.mail.protecion.outlook.com.

Office 365 Hybrid Emails Stuck in Queue: target host responded 421.4.4.1 connection timed out mail-onmicroosft.mail.protecion.outlook.com. You receive the following error after running the Hybrid Configuration wizard, all emails are building up in the Exchange Queue. To resolve this issue, follow the below steps. Make sure that the all your exchange servers are added to the…

User receive the following NDR trying to send email from Exchange Online: 550 5.1.8 Access denied, bad outbound sender.
|

User receive the following NDR trying to send email from Exchange Online: 550 5.1.8 Access denied, bad outbound sender.

User receive the following NDR trying to send email from Exchange Online: 550 5.1.8 Access denied, bad outbound sender. If you receive the following error, then it means that your account has been sending out too much spam and has been blocked from sending emails. Typically, this problem occurs because the users account has been…

Block Office 365 Sign-In based on On-premise Active Directory Security Group.
| | |

Block Office 365 Sign-In based on On-premise Active Directory Security Group.

Block Office 365 Sign-In based on On-premise Active Directory Security Group. The purpose of this guide is the assist support staff to block access to multiple accounts that has been compromised. To get started, login to Azure Active Directory Portal. https://portal.azure.com 1 From the Main menu, click on Azure Active Directory on the left-hand side….

The Connection to the Server could not be completed Migrating to Exchange Online
| |

The Connection to the Server could not be completed Migrating to Exchange Online

The Connection to the Server could not be completed Migrating to Exchange Online Use receive the following error when migrating from Exchange On-Prem to Exchange Online. After receiving this issue, I decided to look further into the MigrationEndPoint using PowerShell for EXO. Get-MigrationEndpoint -Identity mail.o365lab.com |fl Here I can see that the user who created…

Enable MFA without assigning Global Admin Privileges to support staff
| |

Enable MFA without assigning Global Admin Privileges to support staff

Enable MFA without assigning Global Admin Privileges to support staff The purpose of this post is to provide an alternative method of enabling MFA on user accounts without assigning Global Admin Permissions to all support staff. Please take note that this solution is based on Azure AD Conditional Access. This option can be used to…

Bulk Enable Exchange Online Archiving
| | |

Bulk Enable Exchange Online Archiving

Bulk Enable Exchange Online Archiving This below script simply just enables the Online Archiving Mailbox for users in Exchange Online. The script needs to be run from the On-prem Exchange environment. $list = Import-Csv “C:\Scripts\EnableArchive\enablearchive.csv” foreach($entry in $list) { $User = $entry.User Get-RemoteMailbox -id $User |Enable-RemoteMailbox -Archive } Csv Sample. Simply has the users Alias…