SuperTekBoy

Practical Help for Exchange & Office 365

Managing mailbox storage with Outlook on the Web (OWA)

By Leave a Comment

Share
Tweet
Share
Reddit
Print

Outlook on the web (OWA) has some great features when it comes to managing your mailbox storage. These features not only include an analysis of how you are consuming your mailbox space, but also tools to clean up that space. In this article, we will take a look into managing a mailbox and a potential method for cleaning it up.

To access this feature open Outlook on the Web, select the Settings (” “) icon in the top-right and the View all Outlook Settings link, at the bottom of the Settings pop-out window.

From the Settings screen, select the General then Storage tabs.

Managing mailbox storage with Outlook on the Web (OWA)

The top part of the Storage screen displays a chart that identifies our allowable mailbox size and our consumption of that allowable size. In our example, we are using 2.68 GB of an allowed 99 GB.

The chart also identifies how much space the top three folders are consuming in blue, yellow, and green. The grey color is the sum of all remaining folders in the mailbox. The legend below the chart identifies the names of the top three folders. From our example, you can see the top three folders in this mailbox are named “Exchange”, “Sent Items” and “!OM”.

The lower part of the Storage screen lists all folders in the mailbox, the size of each folder in megabytes, and the number of items in each folder. From our example, we can see the “Exchange” folder is 796 MBs in size and contains 4,144 items. Note that this list will not show any empty folders.

[Read more…] about Managing mailbox storage with Outlook on the Web (OWA)
Print Friendly, PDF & Email

Office Activation fails ‘This feature has been disabled by your administrator.’

By Leave a Comment

Share
Tweet
Share
Reddit
Print

When trying to activate (or sign in to) Microsoft Office with your Office 365 enterprise credentials, you may receive the following error.

Office Activation - This feature has been disabled by your administrator
This feature has been disabled by your administrator.

This error is likely a result of a group policy.

To check this, open Group Policy Management Console (GPMC). From the GPMC, expand your domain name (e.g., skaro.local) and Group Policy Objects.

Select your policy that is managing the Office suite and click the Settings tab. Expand User Configuration (Enabled) > Policies > Administrative Templates > Microsoft Office 2016 > Miscellaneous. If you see a setting named Block signing into Office that is Enabled, this is the culprit.

Group Policy - Block signing into Office Group Policy Management Console

Note: If you do not see this setting, I recommend checking all group policies currently applied to the impacted user. You can get this by running GPRESULT from a command prompt on your impacted user’s computer.

[Read more…] about Office Activation fails ‘This feature has been disabled by your administrator.’
Print Friendly, PDF & Email

RPC/HTTP & Security Defaults may prevent Outlook reconfiguration after migrating to Exchange Online

By Leave a Comment

Share
Tweet
Share
Reddit
Print

In a previous article, we discussed how a conditional access policy blocking basic authentication prevents Outlook clients (leveraging RPC over HTTP) from reconfiguring after a mailbox migration to Exchange Online. This is due to RPC over HTTP not supporting modern authentication. On the other hand, Outlook clients leveraging MAPI over HTTP would reconfigure without incident. This is due to MAPI over HTTP supporting modern (and basic) authentication.

This article explores how security defaults, which Microsoft has been enabling on all new tenants to block basic auth, could also prevent Outlook clients (leveraging RPC over HTTP) from reconfiguring after migration to Exchange Online.

How to check if Security Defaults are enabled (modern authentication is enforced)

To determine if security defaults are enabled in your tenant.

Log into the Microsoft 365 Admin Center. From the left pane expand Settings and select Org Settings. From the Services tab, select Modern Authentication. The Modern Authentication pop-out will identify if security defaults have been enabled.

The screenshot below shows the message that security defaults are enabled, indicating that modern authentication is required and basic auth connections are blocked.

M365 Security Defaults Enabled

If security defaults have not been enabled in your tenant, the modern authentication pop-out will have configurable options. The screenshot below shows that modern authentication has been enabled (but it is not enforced). We can also see which protocols permit clients to use basic auth. Based on the selections in the screenshots, Outlook clients are still permitted to use basic auth (via either RPC over HTTP or MAPI over HTTP).

M365 Security Defaults Disabled

Tip: While not the focus of this article, I highly recommend working towards disabling basic auth on as many protocols as you can before the October 1st, 2022 deadline. This not only improves your security posture prior to October but also gets you prepared for the retiring of basic auth.

[Read more…] about RPC/HTTP & Security Defaults may prevent Outlook reconfiguration after migrating to Exchange Online
Print Friendly, PDF & Email

RunAs Radio #818 – Email Transport Security

By Leave a Comment

Share
Tweet
Share
Reddit
Print

On February 15th, I had the great pleasure of being a guest on RunAs Radio. I joined host Richard Campbell to discuss email transport security; including:

Gareth on Runas Radio #818 - Email Transport Security with Gareth Gudger

Opinion change: Since recording, I think that even if the MTA-STS TXT record was victim to a man-in-the-middle attack it probably would not be much of an issue. If the bad actor changed the ID in the TXT it would simply tell the sender to pull a new policy from a website the recipient owns and controls. As mentioned in the podcast, I believe DANE is the more secure solution. Be sure to consult with your security team about which solution best suits the needs of your organization.

[Read more…] about RunAs Radio #818 – Email Transport Security
Print Friendly, PDF & Email

Configure global mail flow settings from the new Exchange Admin Center

By Leave a Comment

Share
Tweet
Share
Reddit
Print

One of the new Exchange Admin Center benefits is that many of the global mail flow settings that were previously only available via PowerShell are now available in this new GUI. For example, the Mail Flow settings page allows you to define several global transport configurations. This article will look at these settings and what they do. These settings are:

  • Plus addressing
  • Sending from aliases
  • Enabling SMTP AUTH protocol
  • Legacy SMTP AUTH endpoint for TLS 1.0 / TLS 1.1 clients
  • Reply-All storm protection

To find these settings, log into the new Exchange Admin Center and navigate to the Settings tab on the left navigation pane. Then select Mail Flow.

Exchange Online Mail Flow Settings B

This will pop out a dialog with the following options.

Exchange Online Mail Flow Settings

Plus Addressing

Plus addressing allows users to create their own unique email addresses by leveraging a plus sign in their email address—for example, apond+newsletter@exchangeservergeek.com. Anything after the plus sign is completely at the discretion of the user.

This becomes particularly useful when you want to target newsletters to a unique email address, especially when configuring inbox rules. It is also helpful to determine who might have sold or leaked your email address.

To enable this feature from the new Exchange Admin Center, navigate to Settings > Mail Flow. From the pop-up window, select Turn on plus addressing from your organization and click the Save button.

If you prefer to enable this from PowerShell, log onto Exchange Online PowerShell and run the following command.

 C:\> Set-OrganizationConfig -AllowPlusAddressInRecipients $true

To confirm the setting has taken effect, run Get-OrganizationConfig.

 C:\> Get-OrganizationConfig | FL AllowPlusAddressInRecipients

AllowPlusAddressInRecipients : True

Users can then start leveraging plus addresses. Emails addressed to a plus address will appear in the user’s inbox without any further user intervention. From there, the user can build inbox rules for the plus addresses if they desire.

Plus Addressing in Exchange Online

Reference: Plus Addressing Now Available in Exchange Online

[Read more…] about Configure global mail flow settings from the new Exchange Admin Center
Print Friendly, PDF & Email

Accessing HPe iLO 3 fails with Unsupported Protocol: ERR SSL VERSION OR CIPHER MISMATCH

By 14 Comments

Share
Tweet
Share
Reddit
Print

If you are trying to connect a modern browser such as Microsoft Edge to HPe’s Integrated Lights Out 3 (iLO 3) management interface, you may receive the following error and be blocked from accessing the iLO webpage.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Unsupported protocol
The client or server don't support a common SSL protocol version or cipher suite.
ERR SSL VERSION OR CIPHER MISMATCH - The client or server don't support a common SSL protocol version or cipher suite.

To resolve this error, I recommend ensuring you are on the latest iLO 3 firmware from HPe. At the time of writing, 1.94 was the latest HPe firmware for iLO 3 (released Dec 17, 2020). Firmware can be updated in several ways, including uploading the BIN file via the iLO webpage or online from any number of operating systems, including Windows, Linux, and VMware. Also, refer to the HPe documentation on how to upgrade your firmware.

Once you have the latest firmware, log into the iLO webpage from an older browser, such as Internet Explorer. Then, from the left navigation menu, expand Administration and select Security.

From the Security page, select the Encryption tab.

Then, under the Encryption Enforcement Settings section, toggle the Enforce AES/3DES Encryption dropdown to Enabled.

Click Apply.

[Read more…] about Accessing HPe iLO 3 fails with Unsupported Protocol: ERR SSL VERSION OR CIPHER MISMATCH
Print Friendly, PDF & Email

Filed Under: HP

Toggle Dark Mode
Toggle Font Size