Category: Exchange Online

Cat Links Exchange Online, Microsoft 365, Office 365

Lack of service-side validation allows group guest user restrictions bypass via OWA

Posted on Vasil Michev

A recent exploration into how OWA enforces guest user restrictions for Microsoft 365 Group releaved that client-side checks are used, and in turn restrictions could be bypassed by crafting a request with modified payload. After doing the responsible thing and reporting this issue to Microsoft, I am now bringing you some additional details on it, after the corresponding fix has been rolled out worldwide. …

Continue readingLack of service-side validation allows group guest user restrictions bypass via OWA

Cat Links Exchange Online, Microsoft 365, PowerShell

Upcoming changes to the Connect-IPPSSession cmdlet (the EnableSearchOnlySession switch)

Posted on Vasil Michev

A recent message center post, MC1131771, notified us about upcoming changes to PowerShell connectivity to the Security & Compliance endpoint. In particular, starting Aug 31st, some cmdlets exposed via said endpoint will require you to leverage the -EnableSearchOnlySession parameter when running the Connect-IPPSSession cmdlet. The set of cmdlets includes: New-ComplianceSearchAction …

Continue readingUpcoming changes to the Connect-IPPSSession cmdlet (the EnableSearchOnlySession switch)

Cat Links Exchange Online, Microsoft 365, Office 365, PowerShell

Enabling litigation hold on an Exchange Online mailbox fails because of invalid license

Posted on Vasil Michev

A query came up about not being able to activate Litigation hold on a (shared) mailbox in Exchange Online. While the there have not been any changes in the process of enabling a hold on a mailbox, we did get a change in the provisioning behavior for shared mailboxes few …

Continue readingEnabling litigation hold on an Exchange Online mailbox fails because of invalid license

Cat Links Exchange Online, Microsoft 365, Office 365, PowerShell

Using the Get-MessageTraceV2 cmdlet to generate mail traffic statistics by user

Posted on Vasil Michev

In this article we explore the recently introduced Get-MessageTraceV2 cmdlet and use it to bring new life to the good old Get-DetailedMessageStats.ps1 script. The script has now been updated to work with modern authentication methods and the new “no pagination” approach to fetching message trace data, as well as to handle scenarios that have become available since its initial introduction (i.e. plus addresses). …

Continue readingUsing the Get-MessageTraceV2 cmdlet to generate mail traffic statistics by user