Collaborate Disseminate
Microsoft has announced that the Exchange Server cumulative updates (CUs)… Continue reading Microsoft Exchange Server Cumulative Updates will Shift to a Biannual Release Cycle
Put October 13 In Your Diary Time passes and products age, except in the cloud where renewal is an ongoing process. For Exchange Server 2016, Microsoft is keen for you to know that it reaches the end of mainstream support on October 13, 2020. Extended support for Exchange 2016 ceases on October 14, 2025. Exiting […]
The post Decision Point: Exchange 2016 Exits Mainstream Support Soon appeared first on Petri.
Continue reading Decision Point: Exchange 2016 Exits Mainstream Support Soon
The revelations that Exchange Server has had a vulnerability in the Exchange Control Panel since Exchange 2010 shocked some. Microsoft has patched CVE-2020-0688, but the problem gives on-premises administrators something to think about as they look to the long-term future of their email service. Staying on-premises is an option, but going to the cloud might be more secure.
The post CVE-2020-0688 Puts Focus on Exchange On-Premises Vulnerabilities appeared first on Petri.
Continue reading CVE-2020-0688 Puts Focus on Exchange On-Premises Vulnerabilities
A Microsoft employee commented that Exchange 2019 is the last on-premises version and will bring the era of Exchange to a close after 25 or so years. Perhaps that’s the case, and certainly there’s been a huge transition of email workload to Exchange Online. But is an opinion expressed by a single Microsoft employee enough to tell us what will happen over the next few years?
The post On-Premises Exchange Not Going Away Just Yet appeared first on Petri.
Continue reading On-Premises Exchange Not Going Away Just Yet
A recent Microsoft post contained the news that Exchange Online uses Windows Server Core. That might be news to some, but not to anyone who’s been following the advice of the Exchange product group. Exchange Online doesn’t use virtual servers, follows a preferred architecture, wants to reduce the potential attack surface, and extract as much CPU as possible out of its servers. All good reasons why Windows Server Core helps.
The post No Surprise That Exchange Online Uses Windows Server Core appeared first on Petri.
Continue reading No Surprise That Exchange Online Uses Windows Server Core
Exchange 2019 has been around for six months. It’s a good time to consider if on-premises organizations should upgrade or stick with the version of Exchange they run today. Exchange 2019 is a solid release, even if Microsoft’s engineering efforts are largely focused on the cloud these days. Of course, moving to Exchange Online is an option too, but perhaps not for the dedicated on-premises deployments.
The post Stick or Stay: Should I Upgrade to Exchange 2019? appeared first on Petri.
Continue reading Stick or Stay: Should I Upgrade to Exchange 2019?
The recent exposure of a privilege elevation vulnerability that exists in the control Exchange has over Active Directory and EWS push notifications is fixed by cumulative updates for Exchange 2013, Exchange 2016, and Exchange 2019 and a roll-up update for Exchange 2010 SP3. These changes mark an architectural modification for Exchange, something that Microsoft is loathe to do outside major releases. Install the updates now!
The post Exchange Privilege Elevation Vulnerability Addressed by Microsoft Patches appeared first on Petri.
Continue reading Exchange Privilege Elevation Vulnerability Addressed by Microsoft Patches
No fix is available yet for the Exchange vulnerability reported by Dirk-jan Mollema and described in CVE-2018-8581. Apart from deploying a split permissions model, no out-of-the-box mitigation exists today. Microsoft is working actively to fix the problem and in the meantime, the brains of the Exchange community are hard at work to come up with possible solutions.
The post Fixing a Multi-Protocol Exchange Server Vulnerability appeared first on Petri.
Continue reading Fixing a Multi-Protocol Exchange Server Vulnerability
A newly-discovered vulnerability in Exchange potentially allows attackers to gain control over Active Directory. Since Exchange 2000, Exchange has been a highly-privileged server that’s tightly connected to Active Directory. Add in some NTLM weakness, Exchange Web Services push notifications, and everything comes together for the bad guys.
The post All Versions of On-Premises Exchange Server Vulnerable to New Attack appeared first on Petri.
Continue reading All Versions of On-Premises Exchange Server Vulnerable to New Attack
Exchange 2010 will become unsupported on January 14, 2020. It’s time to decide whether to move to Office 365 or Exchange 2016/2019. Exchange 2010 was a really big and important release in the 23-year history of the product, so it’s sad to see it heading to the software scrapyard.
The post Exchange 2010 Nears the End appeared first on Petri.