Server 2016: Feature updates similar to Windows 10

Feature updates for Windows Server 2016 will also be released twice a year in the near future. This means that the update behavior is similar to Windows 10. However, Windows Server 2016 will offer the option of selecting the "Long-term Servicing Channel", which means that new features will only be released every two to three years. ... Read more

Sophos UTM: New update (9.501-5)

Sophos has released an update for Sophos UTM 9.5, which fixes quite a few bugs. The update has the version number 9.501-5 and is just under 221 MB in size. If you are not yet offered the update via the Up2Date service, you can also download it directly here: http://ftp.astaro.de/UTM/v9/up2date/ At the bottom of the page you will find the update from ... Read more

Server 2016: Group policy for data protection settings

In addition to Windows 10, Windows Server 2016 also transfers a lot of data to Microsoft. In many companies, this chatty behavior of the current Windows versions is probably undesirable. Microsoft seems to be well aware of this and has published extensive documentation on which services transfer data to Microsoft. The documentation is available here: Manage connections ... Read more

Quick & Dirty: Finding invalid and orphaned group policies

I have started to create a small PowerShell script to help detect invalid or orphaned group policies. The first version of the script searches for group policies that are not connected to an OU, have no security filtering or have all GPO settings disabled. I will add more functions to the script in the future and publish it as ... Read more

Exchange 2016: HealthCheck URLs for load balancers

The status of individual Exchange protocols can be easily determined via a URL. This is particularly interesting for load balancers, as it is easy to determine whether the protocol is available on the respective server. Querying the respective URLs is more meaningful than simply checking whether the port on the Exchange server is still open, but ... Read more

Secure Exchange 2016 installation (hardening)

Introduction This article contains my favorites for general adjustments to the Exchange environment after or during installation. The hardening measures described below are very general, so they can be applied to existing and new environments. The measures relate to the Exchange server and the operating system itself, whether the measures are ... Read more

Attention: Do not install .NET Framework 4.7 on Exchange servers

The .NET Framework 4.7 has been available for about a month and is expected to be distributed soon via Windows Update. Even though .NET 4.7 is already supported on Windows Server, you should be careful with Exchange Servers. Here is the current support matrix for Windows Server and .NET 4.7: The .NET Framework 4.7 is supported on the following Windows Server ... Read more