PowerShell cmdlets to add or remove resource delegates in bulk

A while back, I noticed that Exchange Online’s Set-CalendarProcessing cmdlet no longer performs any validation for some of its parameters, and diligently issued a PSA about it. While Microsoft is looking at the issue (and will hopefully address it), an idea came to mind – provide a better cmdlet that …

Continue readingPowerShell cmdlets to add or remove resource delegates in bulk

How to configure forwarding for a Microsoft 365 Group

In this article we explore the various ways to configure forwarding for email messages addressed to a Microsoft 365 Group. These include the self-service Inbox rule based method, mailbox-level forwarding, mail flow rules and simply adding the recipient to the Group’s “subscriber” list. Some basic troubleshooting steps are also outlined for the external forwarding scenario. …

Continue readingHow to configure forwarding for a Microsoft 365 Group

How to add a shared mailbox as additional account in the New Outlook

In order to access certain Outlook features, it has always been recommended to add a shared mailbox as additional account. At long last, this functionality is now available in the New Outlook client. Follow the steps in this article to learn how the process works and what new features the modern Outlook client brings! Enable access to rules, auto-replies, categories and more! …

Continue readingHow to add a shared mailbox as additional account in the New Outlook

Lack of service-side validation allows group guest user restrictions bypass via OWA

A recent exploration into how OWA enforces guest user restrictions for Microsoft 365 Group releaved that client-side checks are used, and in turn restrictions could be bypassed by crafting a request with modified payload. After doing the responsible thing and reporting this issue to Microsoft, I am now bringing you some additional details on it, after the corresponding fix has been rolled out worldwide. …

Continue readingLack of service-side validation allows group guest user restrictions bypass via OWA