Blog

Autoforwarding is Badness Allowing users to forward their email outside Exchange Online is bad, especially if they don’t keep a copy of the forwarded messages in their mailbox. Apart from removing email from the controls imposed by data governance policies, it creates a risk that confidential information travels outside the organization, including when an attacker…

If you have Office 365 E5 licenses, your mailboxes generate MailItemsAccessed events. These events are stored in the Office 365 audit log and can be used for investigating potentially compromised mailboxes. Useful information is in the audit events, but some processing is needed to extract the full benefit. Here’s how to do it with PowerShell.

Soon you’ll be able to synchronize Office 365 notification messages to Planner and manage the introduction of the changes through Planner. The integration is straightforward and works well. In fact, I have nothing much to complain about, which is why I wonder if I am missing something.

Communications Compliance is a part of Microsoft 365’s Insider Risk functionality. This is a replacement for Office 365 supervision policies and introduces coverage of new communications and a lot of machine learning, plus a link to Advanced eDiscovery for the really complicated cases. Not every Office 365 tenant will be interested in employee monitoring, but those that need to should look at Communications Compliance.

If you want to maximize your skills while sitting at home, Amazon has free options available.

This month Microsoft patches three Windows 10 zero-days, including a patch for two RCE flaws discovered last month in the Windows Adobe Type Manager Library. There are also important updates for vulnerabilities in the OneDrive desktop app for Windows, the DNS client service, and in the way that Windows handles token relationships.

Cloud Discovery, Application Proxy, passwordless authentication, and more Azure Active Directory features coming to Microsoft 365 Business in April.

Microsoft is going to rebrand Office 365 Groups to Microsoft 365 Groups in the near future.

The new licensing guidance for Microsoft 365 security and compliance features is welcome, but as is probably inevitable, some inconsistencies exist that need to be probed and discussed, and hopefully resolved by Microsoft in the long run. Why do DLP policies for Teams need E5 licenses? Why does applying a default retention label to a SharePoint library need E5? There’s lots to discuss about issues Microsoft should fix.

Microsoft is finally increasing Teams calling to support 9 participant streams, up from 4 but well behind Zoom.

Microsoft announced that it is delaying disabling legacy TLS protocols by default in all its supported browsers.

Amazon has just released the preview version of its new container optimized OS