Fort Knox: Office 365 encrypted file storage

In Mid-2014 Microsoft introduced a new encryption technology to Office 365 that they code named “Fort Knox”.  Fort Knox is a blob encryption technology that is applied to SharePoint Online and OneDrive for Business, and as I am primarily an Exchange guy I was not really aware of Fort Knox until recently. After taking a look at this technology, I think it is a pretty nifty bit of security that Office 365 customers, and potential Office 365 customers, should know about.

Read more

Password Management

Today I am going to move a bit off of my normal topic of Exchange and Office 365. I don’t think this topic is going to be too far afield, but fair warning none the less. In this post I am going to talk about password management, and a nifty new tool that I think makes the somewhat cumbersome task a bit easier and more secure.

Read more

New Exchange hybrid troubleshooting tool

Anyone who has ever done an Exchange Online hybrid deployment can tell you that process can be frustrating. Before the Hybrid Configuration Wizard the process was long and complicated with too many steps and too many places to make a small mistake. With the advent of the HCW the process became much more of a “black box” where the guy doing the deployment really didn’t know what configuration changes were being made, so misconfigurations became very hard to troubleshoot. Add on top of all that the fact that you, and the person doing the deployment really have no control or visibility into the Microsoft side of thing, and a hybrid deployment quickly turns into a difficult task.

Read more

Changes to off boarding from Exchange Online

When I migrate customers to Exchange Online I always recommend they maintain an Exchange hybrid server. There are several reasons for this recommendation; it’s much easier to manage SMTP addresses with an Exchange server on-premises, and it’s much easier to get your mailboxes back out of Office 365 if you maintain a hybrid server. To me, one of the great advantages of Office 365 is that I have never felt Microsoft was trying to “trap” customers in the service. They have always made it fairly easy to move mailboxes in and out of Office 365.

Read more

MCSMLab: Now with 100% more MVP

On the morning of January 1, 2015 I received notification that I have been awarded my first MVP. Seems to me to be a pretty decent way to kick off a new year.

Microsoft’s MVP program is an award to recognize “exceptional, independent community leaders who share their passion, technical expertise, and real-world knowledge of Microsoft products with others”.  I am honored to join their ranks.

Read more

Multi-Forest Migrations to Exchange Online

Over the past few years, I've migrated many mailboxes into Exchange Online. I've talked to customers with every possible set of requirements, and I've been able to accommodate most of them. Until recently, there has been one category of migration requirements that I haven't been able to accommodate: multi-forest migrations. For customers with two or more separate Active Directory (AD) forests, each with their own Exchange deployment, the supported solutions for moving to a single Office 365 tenant were very limited. They could either consolidate their on-premises AD forests into a single forest, or they could contact Microsoft Consulting Services (MCS) and develop a custom solution using Forefront Identity Manager. 

New features in Office 365 partner admin center

One great feature of Office 365 that many may not be aware of is the partner admin center. This gives Office 365 deployment partners who meet specific requirements the ability to have a connection into their customers Office 365 tenant with the customers permission. I have the ability to send a customer a link that will allow them to grant me access into their Office 365 tenant using my own Office 365 credentials, making it much easier for me to do deployment and support work for them.

Read more

PowerShell script: Activate-SyncedPasswords

In June of 2013, Microsoft released an update to the DirSync appliance that allowed it to sync passwords from an on-premises Active Directory into Azure Active Directory for use in authentication. Since then, Microsoft has also released AADSync, which is a more advance version of DirSync that allows for more complex on-premises Active Directory configurations to be connected to Azure Active Directory. Recently AADSync was updated to include the password sync feature.

Read more

Managing Distribution Lists in Hybrid Exchange Online/Office 365 Environments

Microsoft has done a great job of ensuring that hybrid Exchange Online/Office 365 tenants have almost all of the features and functionality of on-premises Exchange Server deployments, without the need for running and maintaining their own servers. However, there is still one major gap companies consistently run into as they move to a hybrid Exchange Online/Office 365 environment: distribution list (DL) management.

Read more

PowerShell script: Get-UsersPerDB

I’m working on an Exchange migration project. I did a green field Exchange 2013 deployment to migrate users to from a hosted solution. During the process I created about 3200 new mailboxes, and I must have done something wrong because those mailboxes ended up all clumped up in a couple of the databases. The problem I ran into is there is no good way to see your mailbox distribution across a number of databases in the Exchange Admin Console.

Read more

Users unable to delete public folder items after public folder migration to Exchange 2013

I recent ran across a case where a customer had recently migrated to Exchange 2013. As one of the final steps in the migration, they migrated their public folders to modern public folders on Exchange 2013. After the public folder migration was complete, the users were unable to delete or modify pre-existing public folder items even though they appeared to have the correct permissions

Read more