• Microsoft Exchange Server

    Block attachments with htm or html extensions and/or javascripts in Office365

    Spammers have been getting craftier with how they get through the bayesian and other heuristic filters many mail providers use to deliver only legitimate emails to recipients. One of the ways they do this is by encoding or encapsulating patterns into base64 or some other encoding mechanism. This allows the email client to render a message with text that would have been blocked by a spam filter as the filter usually can’t comprehend the encoded strings. These usually come down in the form of htm or html attachments where the email client effectively acts as a web viewer to render data to the screen. If we take a sample of…

  • Active Directory,  Microsoft Exchange Server

    Create Email Aliases in Office 365

    The things are always changing. I write less and less how-to things because as the rate of innovation skyrockets (another way to say changes that are sometimes good and sometimes bad) – the second I hit save the article seems out of date, or technical debt. But hey, sometimes I have to look longer than I should for something. So. To create an email alias in Microsoft Online/Office 365. Login to an account with Exchange administrative capabilities Click the Admin tab. Click Exchange in the left sidebar. Click Recipients. Click Mailboxes (or Users in the newer interface). Click the user to create the alias for (in the old interface click…

  • Mac OS X Server,  Microsoft Exchange Server,  Synology,  WordPress

    Install WordPress on a Synology

    Earlier, I wrote an article on how to export data from the macOS Wiki Service. But now that you have your data in a file, where are you going to import it into. Well, you could do some kind of custom hosting service. Or if you want to run your own server, you could use a Synology. Synology makes installing WordPress a snap. To get started, first open Package Manager. From Package Manager, search for WordPress.Click Install.Click Yes to install the dependencies.Enter a username and password to pass to Maria DB (root with a blank password).Enter a username and password for the wordpress database and click Next. Click Apply.  Click Open…

  • Microsoft Exchange Server,  Network Infrastructure,  Windows Server

    Enable Modern Authentication for Office 365

    I covered managing devices based on policy in http://https://krypted.com//microsoft-exchange-server/manage-activesync-policies-on-ios-using-powershell-in-exchange-2016/. One of those policies is “modern authentication”, Azure Passthrough Authentication, or OAuth if you will. To enable it, log into Exchange Online via PowerShell and run the set-OrganizationConfig to set -OAuth2ClientProfileEnabled to True: Set-OrganizationConfig -OAuth2ClientProfileEnabled $true If you’re using Skype, do an override: Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed Now check that OAuth was enabled properly: Get-CsOAuthConfiguration And viola, you’ve caught up to where WordPress was at with OAuth 8 years ago! Next, check the global ADFS authentication rule: Get-AdfsAdditionalAuthenticationRule And you can use Set-AdfsAdditionalAuthenticationRule. Now, you should be able to check the ADFS rules required for a given MFA requirement: Get-AdfsRelyingPartyTrust –Name "Krypted" And…

  • Mac OS X,  Microsoft Exchange Server

    Outlook 2016 and Logs

    The logs for Outlook are… Interesting… Diagnostics are difficult without logs. They used to be at ~/Library/Containers/com.microsoft.outlook/ Data/Library/Logs/ or To enable logs, open Outlook and then click on Window and then click Sync Errors. From there, click on the cogwheel and then check the box for “Turn on logging for troubleshooting” Now go ahead and quit Outlook and open it again. When prompted, click “Leave Logging On” and then when you get errors, open the logs. Once enabled, you’ll see logs at ~/Library/Group Containers/UBF8T346G9.Office/OfficeLogging/. You can edit a maximum size for the log files using defaults to send a EWSMaxLogLength key to com.microsoft.Outlook using the following command: defaults write ~/Library/Preferences/com.microsoft.Outlook EWSMaxLogLength 64

  • iPhone,  Microsoft Exchange Server

    Block Specific iOS Versions From Accessing Exchange

    Exchange Online and Exchange 2010-2016 can block a device from accessing ActiveSync using a policy. To do so, first grab a list of all operating systems you’d like to block. To do so, first check which ones are out there using the Get-ActiveSyncDevice command, and looking at devicetype, deviceos, and deviceuseragent. This can be found using the following command: Get-ActiveSyncDevice | select devicetype,deviceos,deviceuseragent The command will show each of the operating systems that have accessed the server, including the user agent. You can block access based on each of these. In the following command, we’ll block one that our server found that’s now out of date: New-ActiveSyncDeviceAccessRule -Characteristic DeviceOS -QueryString…

  • Microsoft Exchange Server

    Manage ActiveSync Policies on iOS Using Powershell in Exchange 2016

    Sometimes you need to manage policies in Exchange ActiveSync programmatically. For example, if a device shows up in a JSS, you can deploy policies to that device at the Exchange ActiveSync (EAS) level rather than using a mobileconfig. To manage these, Microsoft has provided a few pretty easy-to-use commandlets in Powershell. The New-MobileDeviceMailboxPolicy commandlet in Powershell will create a policy based on some attributes that you define. The Get-MobileDeviceMailboxPolicy commandlet in Powershell will show what the contents of a given policy are. The Set-MobileDeviceMailboxPolicy commandlet will set a policy, and has the same structure s the New-MailboxDeviceMailboxPolicy, but applies to existing policies. The Remove-MobileDeviceMailboxPolicy commandlet in Powershell will delete a policy. The Get-MobileDeviceMailboxPolicy commandlet in…

  • 318,  Apps,  Articles and Books,  Bushel,  Business,  certifications,  Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  Microsoft Exchange Server,  Minneapolis

    My 3,000th Post On Krypted

    This is my 3,000th post on Krypted.com. The past 3,000 posts have primarily been about OS X Server, Mac automation, Mac deployment, scripting, iOS deployments, troubleshooting, Xsan, Windows Servers, Exchange Server, Powershell, security, and other technical things that I have done in my career. I started the site in response to a request from my first publisher. But it took on a mind of its own. And I’m happy with the way it’s turned out. My life has changed a lot over these past 11 years. I got married and then I got divorced. I now have a wonderful daughter. I became a partner and the Chief Technology Officer of 318 and helped to shape it into…

  • certifications,  iPhone,  Mac OS X,  Microsoft Exchange Server

    New Microsoft Office for Mac and iOS Accreditation via MacTech

    I recently got the announcement of the new official Microsoft Office Accreditation through MacTech. I was lucky enough to sit in on the previous version of this, so thought I’d push out the information on it. It’s attached to the MacTech Pro Events that MacTech has been running: As you know, Microsoft released a public preview of Office 2016 for Mac. MacTech and Microsoft have created a new accreditation for Apple techs called “Microsoft Office for Mac and iOS Accredited Support Professional, 2015.” Prior to the public Office 2016 announcement, we did a preview of this new course under NDA in Seattle earlier this month. We’re now announcing the new accreditation…