Social Media Connections: Let's Network!
I love the Microsoft Tech Community and find it to be an incredible source of information, discussion, feedback, and comradery. I also use LinkedIn and Twitter to keep in touch with my professional network. Do you? Share your usernames in the comments and let's connect! I'll start 🙂 Twitter: Brian_Levenson LinkedIn: https://www.linkedin.com/in/brianlevensonStep by Step Message encryption Office 365
Microsoft Office 365 Message Encryption In this post, I will look at configuring message encryption in Office 365. What is message encryption? Microsoft Office 365 Message Encryption is an extra add-on online service build on Microsoft Azure Right Management (Azure RMS), By enabling Azure RMS administrators can configure message encryption by configuring exchange online transport rules. The Rules can apply to multiple or only a few users i.e. CEO who needs to send encrypted emails across the internet. The Following diagram showcase the flow of the encrypted email. To get started with the setup we need to make sure that we have the prerequisites completed. In order for us to make use of the service we need the following. Microsoft Office 365 organization for Exchange Online or Exchange Online Protection subscription this will include Azure RMS subscription. The next step would be to enable Azure RMS before we can continue, let’s have a look at how to enable Azure RMS. Azure RMS has some prerequisites that we need to follow as well and they include the following. Supported operating System: Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 Minimum version of Windows PowerShell: 2.0 Microsoft .Net Framework: 4.5 Next, we can download the Azure RMS PowerShell Module Here: https://www.microsoft.com/en-us/download/details.aspx?id=30339 . From the local folder double click the exe file (WindowsAzureADRightsManagementAdministration_x64) to start the Azure AD RMS Setup wizard. Next open PowerShell and the following cmdlet to import the newly installed modules. Import-Module AADRM To see which cmdlet is available for the newly imported module type the following. Get-Command -Module ADDRM To get started we need to connect to Azure RMS, type the following cmdlet and enter the credentials of a Global Administrator. Connect-AadrmService Now that we have a successful connection establish with Azure RMS, we can go ahead and run the following Cmdlet to Enable Azure RMS. Enable-Aadrm For the purpose of this lab I will not active Azure RMS across all user in my Office 365 organization, instead I will configure Azure RMS to only allow the users to protect content using Azure RMS if they meet the following. Note If you don’t want all users to be able to protect files immediately by using Azure Rights Management, you can configure user onboarding controls by using the https://docs.microsoft.com/en-us/powershell/module/aadrm/set-aadrmonboardingcontrolpolicy PowerShell command. You can run this command before or after you activate the Azure Rights Management service. Is part of an security group? Has an Azure RMS license? The complete post can be found Here: http://thatlazyadmin.com/2017/08/16/encrypting-email-messages-microsoft-office-365/ http://thatlazyadmin.com
Outlook Cannot Send Email After 1907 Build 11901.20080 Upgrade
Our pilot group using Monthly Channel (Targeted) are having issues sending emails. One is you are prompted with a box: Cannot sent this item Another, you just cannot click the Send button. This all started after the upgrade to 1907 Build 11901.20080 You can send a blank email with no subject and that seems to go through. Replying forwarding etc is no good. Also happens to the various shared mailboxes we use. I run the command below to downgrade to the previous 1906 version and the issue is resolved cd %programfiles%\Common Files\Microsoft Shared\ClickToRun officec2rclient.exe /update user updatetoversion=16.0.11727.20244 We are currently still using in house Exchange 2010 SP3 servers. Any suggestions would be greatly appreciated.
Standard Operating Procedures in OneNote - Best Method?
Hi, I've been in business for over 18 years, with 6 employees. We have over 300 policies and procedures that have been written and rewritten. They have always been stored on our Sharepoint server in a regular file folder structure that syncs to our computers. Because of it, nobody uses them for they are difficult to find. Sometimes you don't know the name of what you're looking for, other times its an SOP that could be under production or finance. The system has just never worked. I'm currently implementing a system in OneNote. I have it set up where our 9 primary areas are all tabs. There then exists sections for checklists, specific procedures, and then one large 20-30 page manual for that department that discusses in detail everything that needs to be known. An example is in the 23-page Marketing Manual, there are five paragraphs explaining what brand colors are, why they are important, and why we can't stray from them. It then has a few links to reference other documents, one of them is our Branding Sheet that is a Word document, stored inside OneNote. OneNote is also great because it's desktop software that each of our computers has, every single document can be searched at once, you can utilize links to any part that you'd like, you can utilize tags, and you can store the referenced document inside OneNote (so I don't have to deal with somebody changing the file name or somehow breaking the link to the server. I haven't released it yet, but my employees say they would use it if it were easy. As I'm slowly going through and entering the SOPs into OneNote, I'm finding minor issues with my system in OneNote The formatting is VERY limited. So making a great SOP is not as easy as it is in Word Once I have everything in there, I dont think I can get it back out in an editable fashion. I can print the .pdf but it's not like it's a Word document that can be moved around You can't really set permissions on it. I can lock pages, which would work, but I'd prefer permission on different areas Getting everything in there is going to be challenging enough, then I have to go back and link everything. Before I spend too much time organizing these SOPs and copy/pasting them into OneNote, I was hoping that somebody has gone down this road before and can either advise me away from OneNote to another product or offer advice as to why I should keep going down my path. Thanks in advance. Aaron
Exchange hybrid Communication Question
My organization is in hybrid mode. We have already moved our users to the cloud. Now I have the security team asking me when I am going to turn off various services and exposrue to the outside. The problem I have is not knowing what I can turn off. Currently we only use Exchange for management purposes. If I turn off IIS or disable OWA will I kill that connection? I guess I just need to know How does Exchange on prem communicate to Exchange Online? Clarification: How does Exchange On-prem communicate to Exchange Online in regards to management of user accounts? We aren't interested in using Exchange on-prem for any mail services at this point. At some point I am going to have to move off the current Exchange version. I am really considering to start over fresh with minimum configuration. Just bring up the boxes side by side and turn on the minimum I need to manage users with the new box. Instead of turning things off on the old box...I would just like to understand how Exchange is transporting management information to the cloud.New infographic: document circle of life
"Where should I store my files?" and "What's the difference between SharePoint and OneDrive?" If you get these questions a lot, this infographic could seriously help build a standard lifecycle for files and documents. Also applicable to Teams, Outlook Groups, and Yammer, since they use SharePoint in the background. Link below for full-size version. http://icsh.pt/DocCircleOfLife http://icsh.pt/DocCircleOfLife
If AAD Connect is offline for an extended period of time
Hi, I'm running Azure AD Connect with password hash sync. My current setup is working fine, but I want to know what the impact would be if there's a bad outage that takes on-premises environments offline. Can anyone describe the impact if Azure AD Connect is offline for an extended period? Possibly, a month or more? Will the end users eventually get locked out if Azure AD Connect Connect does not sync for a certain period of time?
