0

Exchange & TCP/IP Port Range

The below is an interesting result after installing Exchange.  The act of installing Exchange will change how TCP/IP operates on the server with respect to ephemeral connections.

This may manifest itself in a few ways.

For example:

  • Security or Network are "surprised" with different network behaviour on an Exchange server when reviewing captures
  • Network team sets a very restrictive firewall ACL which is
Read the rest “Exchange & TCP/IP Port Range”
2

Exchange Setup Fails – Error 3221685616

The saying goes that nothing monitors AD better than Exchange.  While the symptom is an Exchange issue, the underlying root cause is typically something else. Though as an added "feature" Exchange can also monitor additional elements of your infrastructure and indicate they are also unhealthy...

This is one of those such cases, where an Exchange CU was not installing.    In the screenshot below, yo… Read the rest “Exchange Setup Fails – Error 3221685616”

0

QuickTip – Query Block Mode

Exchange 2010 SP1 introduced the concept of block mode or granular replication.  This minimised the time taken for transactions on the active node to be replicated to passive nodes.  Since the feature is enabled by default and is self-managing, there is a good chance that you are benefiting from it without being fully aware of it.

See also understanding High Availability and Site Resilience

If you d… Read the rest “QuickTip – Query Block Mode”

0

Stages of AD Changes When Installing and Uninstalling Exchange

Stages Of Removing Exchange From AD

This is a post to capture the stages of change in Active Directory when the first Exchange server is installed, and opposingly when the last Exchange server is uninstalled.  We will not get into any specific details about the individual changes made to AD, rather this is a 20,000 foot view.

Starting Configuration

A brand new lab was created using Windows Server 2016 for the DCs and Exchange servers.… Read the rest “Stages of AD Changes When Installing and Uninstalling Exchange”

1

Exchange 2019 CU9 Released

Volume Licensing Download Site

Exchange 2019 CU9 has been released to the Microsoft Volume Licensing Center!  Exchange 2019 has a different servicing strategy than Exchange 2007/2010 and utilises Cumulative Updates (CUs) rather than the Rollup Updates (RU/UR) which were used previously.    CUs are a complete installation of Exchange 2019 and can be used to install a fresh server or to update a previously installed one. Exchange… Read the rest “Exchange 2019 CU9 Released”

6

Exchange 2016 CU20 Released

Exchange 2016 CU20 has been released to the Microsoft download centre!  Exchange 2016 has a different servicing strategy than Exchange 2007/2010 and utilises Cumulative Updates (CUs) rather than the Rollup Updates (RU/UR) which were used previously.    CUs are a complete installation of Exchange 2016 and can be used to install a fresh server or to update a previously installed one. Exchange 2013 h… Read the rest “Exchange 2016 CU20 Released”

0

Install March 2021 Security Update–Exchange 2013 Net Framework 4.7.2

You will have seen the multiple posts and communications around the Hafnium Exchange security issue.  One of the most disconcerting issues has been the number of Exchange installs that have not been patched in several years.  Once the storm has abated, I'll put down some thoughts and talk through some of the most problematic issues, but for now let's focus on the task in hand.  Security updates ar… Read the rest “Install March 2021 Security Update–Exchange 2013 Net Framework 4.7.2”

11

Collected Links For Hafnium – March 2021 Exchange Security Issue

The below are a series of links, tips and some very brief thoughts on Hafnium.  I will purposefully not include the content of the other locations as it is changing so rapidly, and there is no way to ensure that it would be updated here in a timely fashion.

 

 

If you read nothing else, please ensure that you install the update from an elevated CMD prompt if you are manually installing. 

FaiRead the rest “Collected Links For Hafnium – March 2021 Exchange Security Issue”

0

Exchange 2010 SP3 RU32 Released

Today is an out of band security release for Exchange.  Due to the way that Exchange 2010 is serviced, security updates are released as a new update rollup (RU).

You can visit the Microsoft Security  Response Center to read the details about this and the other released security updates.

Download Exchange 2010 SP3 RU32

Note – The image does not show RU 32, and I'll update it once the download site is corrected. 

This is build 14.03.Read the rest “Exchange 2010 SP3 RU32 Released”

2

Out of Band Critical Exchange Security Updates–March 2021

Security updates were released today for Exchange 2010, 2013, 2016 and 2019.  Attacks were detected which leveraged these vulnerabilities, so an out of band set of updates was released

This a remote code execution on TCP 443 and is already being exploited as a 0-Day attacks against on-premises Exchange servers.

Microsoft strongly recommends installing this update immediately.  Internet facing serverRead the rest “Out of Band Critical Exchange Security Updates–March 2021”