New security updates for Exchange Server (February 2023)

Microsoft has released new security updates for Exchange 2013, 2016 and 2019. A total of 4 vulnerabilities classified as important have been fixed. Details on the closed vulnerabilities can be found here: As you can see, all 4 vulnerabilities are Remote Code Execution vulnerabilities, so the updates should be installed as soon as possible. Here it goes ... Read more

Microsoft asks for feedback on Exchange updates

Microsoft would like to improve the installation of Cumulative Updates (CUs) and Security Updates (SUs) for Exchange Server and is therefore asking for feedback from administrators in an anonymous online survey. Until the end of January 2023, Exchange administrators can fill out an online form and, if desired, also provide contact details to discuss possible improvements. Since readers of my blog keep ... Read more

New security updates for Exchange Server (January 2023)

Microsoft has released new security updates for Exchange Server 2013, 2016 and 2019 today. The security updates also include a new security feature, which currently still needs to be activated manually: Click here to download the security updates: The security updates fix the following security vulnerabilities classified as important: New security feature: Certificate Signing of PowerShell Serialization Payload To prevent ... Read more

Renew the certificate for the Exchange Server Back End

I have already written several times about the configuration of certificates on Exchange servers, but mostly I have dealt with the front end certificates. However, Exchange servers also have a back end which is configured with a self-signed certificate. The back end certificate does not have to be replaced by a publicly valid certificate or by a ... Read more

Small script to determine the Exchange Server status

In this article there is once again a small script that can display the status of important Exchange parameters. The script clearly shows the status of the databases, queues, services and storage space. So you can get a first quick overview of the Exchange status in case of problems. The script can be downloaded from GitHub: ... Read more

Exchange Server: Send report on mailbox size to users

Viele Admins kennen das Problem, es wurden Größenbeschränkungen für Postfächer konfiguriert und immer mal wieder gibt es Meldungen über volle Postfächer von Benutzern. Als Admin hat man hier eigentlich nur zwei Möglichkeiten, entweder man erweitertet die Postfachgröße für den Benutzer, oder man sagt dem Benutzer dass er aufräumen und alte Mails löschen soll. Die erste … Read more

Exchange 2019: Configure size limit for emails

A size limit for emails can be configured at various points on an Exchange server. The limits can be configured very granularly, for example at mailbox or protocol level. This article lists the options available. This article also applies to Exchange 2016. TransportConfig: Global size limit The global limits for emails are configured in TransportConfig. Read more

New security updates for Exchange Server (November 2022)

On Tuesday, Microsoft released new security updates for Exchange Server 2013, 2016 and 2019. The update closes the ProxyNotShell vulnerability (CVE-2022-41040 and CVE-2022-41082), which was known and actively exploited in September. Click here to download the security updates: Microsoft recommends installing the update as soon as possible. Click here for the article on the Exchange ... Read more

Outlook: Deactivate Autodiscover for Office 365

Two Outlook Autodiscover settings, which are active in the default setting, often cause problems when setting up Outlook accounts. In the default setting, Outlook always tries to retrieve Autodiscover settings from Microsoft 365, which often leads to problems with on-prem Exchange servers. Outlook also tries to retrieve the Autodiscover settings from the root domain ... Read more

Exchange Server: AutoMapping without full access to the mailbox

AutoMapping is a very practical feature in Exchange Server, but unfortunately it is somewhat limited: AutoMapping only automatically connects a mailbox in Outlook if the user has full access to the mailbox. As soon as granular permissions are configured at mailbox level, AutoMapping no longer takes effect. In this case, the user must manually reconnect the mailbox with the granular rights. ... Read more