Exchange 2016: Virus scanner exclusions (script for Windows Defender)

Windows Defender is activated by default on Windows Server 2016. As Exchange Server requires some exclusions from the virus scanner, these must also be stored accordingly in Windows Defender. The same applies to virus scanners from other manufacturers. The following note can be found on the Exchange Team Blog: Windows Defender is on by default in Windows Server 2016. Attention to ... Read more

Windows Server 2016 available!

Microsoft released Windows Server 2016 at the start of Ignite in Atlanta. So far, however, the new server operating system can only be downloaded as a demo version (evaluation version): Windows Server 2016 Evaluation The evaluation version is 5 GB in size and is also available in German. As of today, no version is available in MSDN. But I think it will be ... Read more

Tip: Replace certificate for RDP

Certificate warnings are annoying, regardless of the program. In this case, a remote desktop connection (RDP) warns of an invalid certificate. Everyone is probably familiar with this message: This is a "normal" Windows server, i.e. not a remote desktop host (terminal server), RDP is only activated here for administration purposes. In the standard configuration, Windows uses ... Read more

New updates for Exchange Server 2013 / 2016

Today is regular Exchange Patch Day and updates have been released for Exchange Server 2013 and Exchange Server 2016. The most important new features at a glance: Windows Server 2016 Support for Exchange 2016 CU 3 .NET Framework 4.6.2 Support for Exchange 2016 and Exchange 2013 Improvements to high availability for Exchange 2016 Installation of updates in local language, ... Read more

HowTo: Create group policies yourself (ADMX)

Group policies make an admin's life easier and can be created with little effort. The advantage is obvious: registry settings can be easily distributed to many computers using group policies. The following article contains a short HowTo on how to create group policies yourself using the free "old-school" tool "ADMX-Migrator". Foreword Also for Exchange Server ... Read more

Critical security update for all Exchange Server versions (MS16-108)

Outside of the usual patch interval for Exchange Server, Microsoft has released a security update for all Exchange Server versions, which is intended to fix several security vulnerabilities classified as high or critical. Here is the link to the security bulletin: Microsoft Security Bulletin MS16-108 Brief description of the vulnerability: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe vulnerabilities could allow remote code execution in some of the ... Read more

Group policy for deactivating SSL 3.0 and TLS 1.0 (ADM and ADMX)

Configuring SCHANNEL settings for SSL 3.0 and TLS 1.0, for example, is possible under Windows using the registry. For a larger number of servers or computers, however, group policies are more suitable for configuration, so I have created corresponding templates that make the settings in the registry. Foreword The group policies record changes to the registry ... Read more

Active Directory Rights Management Services (RMS) and Exchange 2016 (Part 3)

In part 1 of this article series, the RMS server was installed and in part 2 the configuration took place. Now the integration into Exchange 2016 follows. As a reminder, the environment from parts 1 and 2 once again: Environment The environment in which the Active Directory rights management services are installed looks as follows: There are a few ... Read more