How I Confirmed the S/MIME Certificate Chain in Exchange Online

When troubleshooting S/MIME in Exchange Online with Microsoft support, one of the key questions was: Is our internal CA certificate chain really stored correctly in the tenant? Exchange Online does not only rely on public online CAs; it maintains its own virtual certificate collection for S/MIME trust, which Outlook Mobile then uses to validate user certificates. To … Weiterlesen

Search Mailbox: Find/remove malicious emails from mailboxes

During a spam wave, it may be necessary to delete certain emails directly from users‘ mailboxes. This requires coordination with the Data Protection Officer (DPO) because it involves direct intervention in the mailboxes. This commands must be used with extreme caution, as incorrect parameters can empty entire mailboxes! The cmdlet Search-Mailbox is used here, which … Weiterlesen

Check Exchange schema version

When installing a cumulative update for Exchange Server, it’s often unclear whether a schema update is necessary. Microsoft usually specifies the required schema version. To check if I’m already using the correct version, I wrote a PowerShell script that outputs the Exchange schema version: You can find a good table view of a collection of … Weiterlesen

Check and re-balance Exchange DAG

It you did some maintenance in your Exchange DAG you must move mailbox databses to other server. After exit the maintenance you should check if some databases are running active on the „wrong“ server. You can also wait until the PreferenceMoveFrequency is over and the cluster do this by itself. You can check the PreferenceMoveFrequency … Weiterlesen

Get all Exchange system mailboxes

When I migrate an Exchange Server and move all the mailboxes, I regularly „forget“ to move the system mailboxes, and then I get an error when deleting the mailbox database. Here are all the commands to find the relevant mailboxes and migrate them if necessary. IMPORTANT: This must be done for each mailbox database because … Weiterlesen

Move and Exit Exchange DAG member to maintenance

I had to patch many servers in a Exchange DAG (CU22, SU, etc.) and wanted to script the entire process cleanly to save time and standardize it. Here’s my script, which I wrote to cleanly put the server into maintenance mode. I also took into account the possibility of moving emails in the mail queues … Weiterlesen