Every user in Active Directory will have remote PowerShell enabled by default. For security reasons, it's strongly recommended to disable remote PowerShell access for non-admins and service accounts in the organization. In this article, you will learn how to disable…
Every organization knows that security is essential and needs to be solid. Nowadays, every organization enables MFA and thinks that they are protected and done. Well, hold your horses because that's not the case. What if a user gets an…
Microsoft released several Security Updates (SUs) for Microsoft Exchange Server to address vulnerabilities. Due to the critical nature of these vulnerabilities, we recommend that customers apply the updates to affected systems immediately to protect the environment. Note: These vulnerabilities affect…
Every organization knows that security is essential and needs to be solid. Nowadays, every organization enables MFA and thinks that they are protected and done. Well, hold your horses because that's not the case. What if a user gets an…
Port 25 is the default port for incoming and outgoing mail flow. But, it doesn't mean you need to allow port 25 for incoming and outgoing mail to everyone (all). Instead, Exchange Server port 25 should be only accessible from…
We recommend enabling TLS 1.2 on Exchange Server 2013/2016/2019 and disabling TLS 1.0, TLS 1.1, and TLS 1.3. Even though TLS 1.3 is newer, you should disable it. That's because TLS 1.3 is not supported for Exchange Server and causes…
Security is essential for every organization. When an account password is breached and access is made to the environment, a lot of confidential stuff will be gathered and leaked. This is a massive problem for every company. Let alone the…
Microsoft released several Security Updates (SUs) for Microsoft Exchange Server to address vulnerabilities. Due to the critical nature of these vulnerabilities, we recommend that customers apply the updates to affected systems immediately to protect the environment. Note: These vulnerabilities affect…
Your Exchange Server 2016/2019 is up to date with the latest Exchange Cumulative Update and Security Update. But when you check the Exchange Server health, it shows a security vulnerability is detected: Download Domains are not configured. This article will…
Idle session timeout is a much-requested feature from organizations to protect sensitive company data. When you enable idle session timeout in Microsoft 365, it will sign users automatically out of Office web apps after a period of inactivity. In this…