Security

New Exchange fixes change permissions model, may disrupt Blackberry, Goodlink, and other services

A recent change in the Exchange permissions model may disrupt Blackberry, Goodlink and other services. Many folks may have already applied hotfixes that changed the behavior of “Send As” and “Full Mailbox Access” permissions. Here’s a brief overview. What: Separation of “Full Mailbox Access” and “Send As” permissions.Why: Earlier, users with “Full Mailbox Access” permission […]

More →

Exchange Server 2003 gets Common Criteria certified

Your favorite messaging server – Exchange Server 2003 (don’t tell me it’s NOT Exchange Server 2003 as of now… though that may change some time in the near future with E12 betas around the corner.. ) – is now Common Criteria certified. “Common Criteria for Information Technology Security Evaluation” (CCITSE) – commonly known as “Common […]

More →

List users with automatic email forwarding enabled

Here’s a script written in response to a newsgroup post today on microsoft.public.exchange.admin. Exchange Server allows you to automatically forward inbound mail for one recipient to another recipient. You can forward messages to the alternate recipient, without delivering a copy to the original recipient (effectively redirecting inbound mail for the recipient), or deliver messages to […]

More →

SID error on cloned Virtual Server / VPC / VMWare OSes

If you simply copy an existing Windows OS image to create multiple virtual servers/workstations, and try to log on to a domain controller, you may get the following error: The system or security ID (SID) of the domain specified is inconsistent with the trust information for that domain. This happens because the SID of the […]

More →

Exchange SP2 – Connection Filtering that actually works

I was excited to find out about Connection Filtering (screenshot) in Exchange 2003 – finally I could use RBLs (real-time block lists) without having to dabble with event sinks!! (This is from back in the days when RBLs were still sexy and could keep a good chunk of spam away from your users… ) Connection […]

More →

Windows Beats Linux in Live Security Contest

Interesting… I’ve since long held Windows as a more easily “securable” (provided you know how) OS. This just came in – from WinInfo Daily Update (Paul Thurrott, creator of SuperSite for Windows, part of the Windows IT Pro mag network).—————————————————– Windows Beats Linux in Live Security Contest During a live duel of sorts between backers […]

More →

HOW TO: View the Security tab in Exchange Admin tool

Every time I get asked this, I remember the name of the key – ShowSecurityPage – but forget the complete path. It’s easier to simply keep the registry hack in a .REG file, so here it is. Right-click on the link, save, remove the .txt from the filename. ShowSecurityPage.reg If you’d rather do it manually, […]

More →