Have an appointment this afternoon 💉

Schimanski!

BTW: from October 1st new Accepted Domains will automatically use the new MX infrastructure, which will maken enabling DANE a little less of a hassle as there should be no change in your MX record. See MC1048624 or mc.merill.net/message/MC10...

#Security #SMTP #MSExchange #Microsoft365 #DANE

You must enable DNSSEC as this change is currently only present on the new mx,microsoft infrastructure. For existing accepted domains this is the way to transition to the new infra. More on DANE: learn.microsoft.com/en-us/purvie...

#Security #SMTP #MSExchange #Microsoft365 #CAA #Certificate

Although for hosted services you do not have control over their certificate management, however I would find it reassuring if such a service would implement CAA. And: Since a few days #MSExchange Online now has CAA records!

With upcoming changes in the max certificate validity period (max 200 days in 2026, 100 in 2027, 47 in 2029) the use of ACME (Automated Certificate Management Environment) will certainly increase. The addition of CAA with ACME is another security layer. CAA is recommended for Dutch governments.

I was so #excited that I misspelled the hashtag 🤣

Read more here for a more detailed explanation and how to monitor the use of MOERA domains: techcommunity.microsoft.com/blog/exchang...

#WeekITtip #MSExchange #Microsoft365 #Security

The biggest gain is achieved by changing your default domain and checking existing objects In addition, the default DKIM signing domain is often the MOERA domain. Take a moment to properly configure each custom domain as well, enhancing #security.

#WeekITtip #MSExchange #Microsoft365

The impact for organizations using custom domains is limited. However, orgs might not be aware that some non-user objects use MOERA domains per default (i.e. Booking app, notifications etc.).

#WeekITtip #MSExchange #Microsoft365 #Security

Read more: techcommunity.microsoft.com/blog/exchang...

#IAM #Exchange #EntraID #Microsoft365

There are more similar changes already in preview and on the roadmap, but this is indeed a very big step in ending the era of maintaining an Exchange server “just because we sync our AD" and providing more flexibility in identity provisioning and governance.

When enabled on a mailbox, you can manage synced identities mail properties directly in Exchange Online. Previously this was not possible and the reason you required an on-prem Exchange Server for management (or serverless with Management Tools).