Scoping conditional access policies to “tagged” applications

Microsoft has been gradually expanding the reach of its Conditional Access feature, while at the same time also releasing a bunch of controls that allow us to more granularly scope CA policies. Examples in this area include not just the ability to scope policies to a subset of the objects …

Continue readingScoping conditional access policies to “tagged” applications

Dual-write glitch allows Exchange Online cmdlets to be executed without an audit trail

In this article we will explore an easy to use method which allowed anyone with sufficient permissions to execute Exchange Online cmdlets without leaving an audit trail. In a nutshell, the issue revolves around how Exchange handles incorrect values for the mailbox anchor, and is supplemented by poor practices within the dual-write method… …

Continue readingDual-write glitch allows Exchange Online cmdlets to be executed without an audit trail