Exchange Server: New security updates (November 2020)

Microsoft today released new security updates for all Exchange Server versions that are still supported. The updates address a total of 3 vulnerabilities: CVE-2020-17083 | Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17084 | Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17085 | Microsoft Exchange Server Denial of Service Vulnerability As two of the vulnerabilities allow remote code execution, it is recommended to ... Read more

New Exchange Reporter version (3.8: code name Leslie)

I have just uploaded version 3.8 (code name Leslie). This is the first version that has a "code name" because Leslie (the Leslie) was kind enough to dig through the many lines of PowerShell code and found and reported some bugs. The following bug fixes are included in version 3.8: updatereport.ps1: The module showed the ... Read more

Exchange Server: New security updates (October 2020)

Yesterday, Microsoft released a new security update for Exchange Server 2013, 2016 and 2019. The update closes the vulnerability CVE-2020-16969. The vulnerability can be exploited with a specially crafted email, so the update should be installed promptly. The update is classified as "Important". Microsoft describes the vulnerability as follows: An information disclosure vulnerability exists in ... Read more

Exchange Certificate Assistant: Not a new version, but a (better) alternative (WIN-ACME)

A long time ago I updated the Exchange Certificate Assistant for the last time. The script uses POSH-ACME as a client to automatically request Let's Encrypt certificates, but there are problems with the script from time to time. However, since there is now a much better version that also supports Exchange Server (and other services), I will ... Read more

Exchange 2019: Comprehensive white paper on certificates

Originally I had given up the plan to write another white paper on the subject of "Exchange and certificates". However, there still seem to be very frequent problems with the configuration of certificates in connection with Exchange servers. There are already a few articles and scripts here, so now a comprehensive whitepaper on the subject will follow ... Read more

Tip: Microsoft Ignite takes place online (free of charge)

The annual Microsoft Ignite conference will take place online this year. Participation is even free of charge this year, interested parties can register for free at the following link and take part in the online conference between 22.09 and 24.09.2020: https://myignite.microsoft.com/home In addition to many other interesting presentations, there will also be a few sessions on Exchange Server. ... Read more