New security updates for Exchange Server (May 2022)

Microsoft has released new security updates for Exchange Server 2013, 2016 and 2019. Click here to go directly to the downloads: Exchange Server 2013 CU23 Exchange Server 2016 CU22 and CU23 Exchange Server 2019 CU11 and CU12 The update fixes a vulnerability (CVE-2022-21978) which is classified as "Important". The update should therefore be installed promptly. Details about the vulnerability can be found here: CVE-2022-21978 The ... Read more

Exchange: Delegate the creation and management of contacts

A reader of this page asked whether it is possible for certain users to create and manage contacts for the organization. A separate RBAC (Role Based Access Control) role can be used for this with little effort. A corresponding role, which can only create and edit contacts in a specific organizational unit, can be created with little effort. ... Read more

Exchange Emergency Mitigation

Exchange Emergency Mitigation (EM) is, as already mentioned in this article, available from CU 11 for Exchange 2019 and CU 22 for Exchange 2016. The way it works is as simple as it is effective: The Exchange servers check every hour whether there is a new set of rules for mitigating a vulnerability. For this purpose, a signed XML document is sent every hour from ... Read more

Exchange 2016: Server error in application, OWA and ECP cannot be called up

I have already written about this problem here: OWA and ECP deliver: server error in the application. However, the problem that OWA and ECP are no longer accessible after an update seems to occur quite frequently. At least I receive mails on this topic from time to time after the release of CUs. A reader has now kindly ... Read more

Sophos UTM: Export WAF certificate using PowerShell (Exchange version)

In this article, I already described how the Sophos UTM certificate can be exported via REST API. A few people have now reported that an automatic export and import for Exchange Server is interesting. I have therefore extended the script and successfully tested the export and import with Exchange Server 2016. ... Read more

Exchange Server Dashboards with ELK (ElasticSearch, Logstash, Kibana) Part 4

In part 3 of this article series, I described the configuration of the ELK components. If someone has already built the environment up to this point, there should already be some data records from the Exchange Message Tracking Logs in the Elasticsearch instance. Introduction This article is about the creation of a simple Kibana dashboard, which provides initial data ... Read more

Windows updates from February 2019 important for Exchange Server

The updates for Windows Server which were released on February 19, 2019 after the regular patchday are also important for Exchange Server running on Windows Server 2016. Specifically, it is about a problem that has existed since September 2018: KB4457127 causes problems on DCs in connection with Exchange KB4457127 causes problems after installation ... Read more