Exchange Server and AMSI: Some information

With the July 2021 CUs for Exchange Server, Microsoft has introduced AMSI integration as a new feature for Exchange 2016 and 2019. Here is some information about the new feature. What is AMSI? The Windows AntiMalware Scan Interface (AMSI) is an interface with which services and applications can be integrated into anti-malware solutions. ... Read more

Exchange Server: OWA and EAC do not start after installing the July updates

After installing the July security updates, it may happen that the Exchange Administrative Center (EAC) and OWA can no longer be opened. The cause is an expired certificate for Exchange Server OAuth authentication. Microsoft also refers to this problem in the release notes of the updates. Unfortunately, the notes on the updates are overlooked ... Read more

New security updates for Exchange Server (July 2021)

A week ago, Microsoft released new security updates for Exchange Server 2013, 2016 and 2019. I'm only reporting on this now because I've been on vacation for the last 14 days. But thanks to the CVE reporter, this shouldn't be a problem :-) The following four vulnerabilities are closed by the updates CVE-2021-31196 CVE-2021-34470 CVE-2021-33768 CVE-2021-31206 Here's ... Read more

Exchange 2016/2019: AMSI integration causes problems with Outlook

The new AMSI integration introduced with CU21 for Exchange 2016 and CU10 for Exchange 2019 in conjunction with various anti-virus scanners causes some serious problems. The Outlook connection sometimes becomes so slow that it is no longer possible to work. Even starting Outlook can take several minutes. Outlook repeatedly fails to respond, ... Read more

CVE reporter: Mail for new vulnerabilities

I have just completed the CVE-Reporter and made the first public version available for download. I've been using the CVE-Reporter for a while now so that I receive an e-mail when new vulnerabilities or security holes are discovered and can therefore react quickly to possible security holes. Until now, I had not made the CVE-Reporter publicly available, because so far ... Read more

Changing the IP address and host name of a domain controller

Sometimes it may be necessary to subsequently change the IP and host name of a domain controller, for example if a new domain controller replaces an old one and is to be accessible under the same IP and name. Changing the IP address of a domain controller is normally possible without any problems, changing the host name of a domain controller ... Read more

Exchange Server: Change display name for external mails

In the standard Active Directory setting, the display name is formed from the first and last name. However, many companies, mostly in German-speaking countries, change the generation of the display name to "last name and first name". This has the advantage that users are easier to find in the Exchange address book and in the Active Directory, as the sorting is based on the surname and ... Read more