Released: November 2021 Exchange Server Security Updates

CSU_Scott Markus Irby : My only "fix" for this was to change links (on webpages/bookmarks) to point to https://outlook.office.com/mail/ instead of local exchange (https://mail.example.com/owa ) since essentially all these users are cloud and the exchange server is mostly just there because of the ADConnect requirement to keep running Exchange (It seems like the management functions could have been added to something like Windows admin center to eliminate the need to keep running Exchange server). You could potentially customize logon.aspx on the server to add a link ("Having trouble logging in? Try https://outlook.office.com/mail "), but that would change the hash of the file (causing alerts if you were comparing hashes to check for e.g. webshells).