I've seen issues with search for the last week or so. A few people here have been unable to search public folders or their inboxes on and off. Supposedly resolved. We'll see...

@marcinozga said in Firefox security issues:

@Emad-R and @Dashrender lol rookies, I've been using FF since it was called Phoenix. And Mozilla Suite before that.

We're showing our age 😞

I won't have any Win 7 systems by that time. At least that is the goal. I was thinking it was Jan 20, 2020. Guess I just confabulated that based on the year being 2020. Still have about 40 systems to issue to replace them.

@marcinozga said in Evaluating Defender ATP:

@Dashrender said in Evaluating Defender ATP:

@marcinozga said in Evaluating Defender ATP:

@Dashrender said in Evaluating Defender ATP:

@Obsolesce said in Evaluating Defender ATP:

@marcinozga said in Evaluating Defender ATP:

@Dashrender said in Evaluating Defender ATP:

@marcinozga said in Evaluating Defender ATP:

@Ambarishrh said in Evaluating Defender ATP:

@marcinozga said in Evaluating Defender ATP:

I was about to evaluate it to, I had a webex session with Microsoft sales, and while it looks nice, it doesn't really offer anything special over other solutions. And it's expensive, really expensive. Perthaps sales mislead me but we either had to subscribe to O365 E5 or M365, or get Windows 10 Enterprise licenses. It worked out to being 15-18 times more expensive than 3rd party antivirus solution.

Not sure how did they gave you that info! An average pricing structure as below

7455634e-b366-4cb5-af6e-859115ac1fcd-image.png

And security products straight from O365 admin portal subscriptions page:
560b3413-64e4-4a77-9b6c-27030798a842-image.png

These are prices IF you already have one of their subscriptions. If you don't need them or have something else, you're paying $15-$20 per month per endpoint. That's how much it costs per year if you go with other av vendor.

But as mentioned - $15-20 per year is only for typical AV, not an ATP product.

And the difference between the two is.....? ATP is really just a marketing phrase at this point. Here are some features from "traditional" av:

malware protection, both behavioral and definition based ransomware protection phishing protection ids/ips device control exploit blocker botnet protection web filtering memory analysis central management, either cloud or local

And a full forensics audit trail?

I'm really curious which ones have this stuff for 15-18 times less the cost of Defender ATP?

I'm having a hard time finding what the real price here is?

I know that Intune is like $4/user/month. aka $48/user/year. this makes it 2-3 times more expensive than typical AV packages - of course, it gives you a lot more features at that price point.

The above posts have a dozen different security things listed.

As @marcinozga says, typical AV with many of the above mentioned features (but not all - and full forensics trails - forget about it) for like $15-20/user/year

ATP is not available if you have just Intune, you need O365 or M365 Enterprise subscriptions, or Windows 10 Enterprise.
O365 E3 is $20/mo plus ATP add-on, I think it's $2/mo. I don't know how much is Win 10 Ent, so I'm guessing O365 E3 is the cheapest route, at $22/mo, that's $264 a year. Depending on number of endpoints you can get AV for $15/year, perhaps even less.

That's an unfair assessment. If you already have O365 E3, then it's only $24/year/user

Also - is O365 E3 the requirement, or can you add ATP onto E1?

Is windows 10 Enterprise a requirement of ATP? Things I was reading last night never mentioned that.

It is fair. What if you don't have O365 because you don't need it or use something else? Other AV don't force you to buy any extra services, you can get AV on a plain vanilla Windows machine.

From the document I got from Microsoft, E3 is minimum. It's O365 E3 or Windows 10 Ent.

If you're not in the O/M365 ecosystem already - then you likely wouldn't even consider this plan, you would likely look at another option... so yeah, it's not a fair comparison.

Now, you could decide, since you are looking at this solution, that you might want to change your other solutions at the same time since MS has these bundled together... but you don't just line item this entire cost all on the ATP project, you split it out.

@JaredBusch
I understand, I just close the annoying dialog and go on.

@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:

@scottalanmiller said in Sales Person Wants Me to Provide Independent Rep With an Email Account:

My second thought is, if having an email account creates a security concern, it is not creating the account that creates the problem, it simply exposes an existing security problem.

Not necessarily security, but accessing features like SFB, OD and Teams. But, as Kelly mentioned, they have Exchange Online P1, which doesn't have any of the other services (different than E1.)

Right, i was assuming that they'd only get email. Even those other things, though, still have security. but no reason to think that you'd provision those, too.

can we get some tags added to this?

o365
scan2email
receiveconnector

@scottalanmiller said in Microsoft Office - Licensing Questions For 3 Scenarios:

@flaxking said in Microsoft Office - Licensing Questions For 3 Scenarios:

I think you must be missing what's going on here. This removes the requirement to integrate more directly with MS Office, instead relying on a separate library that is provided standalone from Office and thus allows saving to Excel. We've had zero issues with using this library, which is actually pretty uncommon for us.

The issue is flexibility. Using third party libraries, you can integrate with Excel or with anything else. Using the Office libraries, every user, in ever system, is bound by the limitations of the most problematic. It makes deployments more costly, and more complex.

That's true, it's the kind of self perpetuating lock-in that has served Microsoft so well. People use Excel, and they ask for saving to Excel spreadsheet, so we create the integration specially to allow Excel and not include ODF, then we help keep the industry locked into using Excel because that's all we support unless you want to just save to CSV.

As for the cost and complexity of deployments... that could be true, except that the installation of our main software is already so complex and costly that dealing with potentially installing this library is the easiest part. I think we probably only have one other developer who would be able to figure out how to install it. I've never heard of any client's IT that have been able to figure out how to install it (just calls from those who have tried), client services has to do literally every install.

@davide-bonavita said in Moving from O365 E3 to Business Premium:

It looks like you don't need to uninstall and reinstall Office

Correct

@wrx7m said in Office 365 User Quarantine - How Do You Access After Redesign?:

@dbeato said in Office 365 User Quarantine - How Do You Access After Redesign?:

@wrx7m I have not found a way to do so, you can create a folder in Outlook to manage it from there. Example here
http://www.expta.com/2015/02/how-to-add-access-to-office-365-eop.html

Have you done this? The link that includes admin seems like it would try to access the admin portion, not the specific user's quarantine. If this works as I need, I wonder if there is a policy to set this up, or if it would be a manual, one-by-one endeavor.

I have not but I can test.

Ah, the old reboot/reinstall/redo.

@scottalanmiller said in Excel - Portion of Sheets Blocked Out/ All Gray:

@wrx7m said in Excel - Portion of Sheets Blocked Out/ All Gray:

@scottalanmiller said in Excel - Portion of Sheets Blocked Out/ All Gray:

@wrx7m said in Excel - Portion of Sheets Blocked Out/ All Gray:

Adding swapping out RAM to the list. Haven't gotten any word back as to whether or not it has fixed it. Just found out that the user will be in China for a week and a half, so I won't really be able to try much.

That'll slow things down.

Swapping RAM or him being out of the country?

Being out of hte country.

OK lol. I thought that is what you meant.

@wrx7m said in PowerShell - Off-boarding Script:

@dafyre said in PowerShell - Off-boarding Script:

@wrx7m said in PowerShell - Off-boarding Script:

@dafyre I think I found where you got it - https://www.powershelladmin.com/wiki/Powershell_prompt_for_password_convert_securestring_to_plain_text

Anyway, I am not sure where, in my script, I should place that function.

You'd put the actual function at the top of your script, and then just

$myPassword=convertFrom-SecureToPlain -securepassword $MySecurePassword

Wherever you need the password in plain text form.

Thanks. It mostly works. The only problem is that it isn't actually using the password I specify at the top. It is somehow generating its own and then writing it at the end. I put in

write-host "Plain Text Says: $plainText"

and it shows the password that I typed in for the secure variable at the beginning, followed by the one that it generated.

Plain Text Says: $#@%4#@177 Jof91348

Works fine for me here.... Check and make sure you don't have an extra write-host or anything somewhere.

4a0db1d0-785c-4771-9ad2-9cec6cb0434a-image.png

@dbeato said in Office 365 Moving Emails to Deleted Items:

@dafyre said in Office 365 Moving Emails to Deleted Items:

@dbeato said in Office 365 Moving Emails to Deleted Items:

@dafyre said in Office 365 Moving Emails to Deleted Items:

e got a strange one... I have a user here whose Emails go from whatever folder they are in to the Deleted Items folder after being read... Sometimes. Sometimes it doesn't happen for several minutes, and other times it happens right away.
The user hasn't been phished that we can tell. No bogus rules in Outlook forwarding things to the deleted items. Check both Web and Outlook 2016.
What am I not looking at that could be causing this?

They got hacked though
https://blogs.technet.microsoft.com/office365security/how-to-fix-a-compromised-hacked-microsoft-office-365-account/
https://docs.microsoft.com/en-us/office365/securitycompliance/responding-to-a-compromised-email-account

Sometimes the rule is a dot on the name....

I am assuming it's a hacked account, but we changed the password to a new one. I disconnected all of her sessions from Office 365.

Still happening. I see no rules with a dot in the name... or spaces or foreign characters. I see exactly the number of rules on my CLI as I do in Outlook and OWA.

Can you clear them all ? Take a screenshot of the settings and then remove them and see what changes. The rules run autonomously and is not someone running them.

That's what we've done now. All of the rules are disabled. End-user is turning them back on one at a time now.

@DustinB3403 said in Office 365 OWA blocks Microsofts own content:

Would you really want MS making exceptions on your behalf and without your knowledge?

I don't have a safe senders list. Yet I get attachments and links all the time.

More than likely, the DKIM/SPF checks failed to cause that.

@LilAng said in Copy / Paste from Excel on Mac to Outlook Web Access Creates Image Rather than Table:

In Excel, use File > Save as web page, then attach the web page to your email message?

Yeah, we found that process. That's a pretty huge "fail" process.

I have a script that I wrote to do this.

https://gitlab.com/dafyre/powershell-utils/raw/master/export-O365Group.ps1

It gets you the person's DisplayName and their email address.

If you're exporting a Distribution List, just add the -distributionlist switch.

If you're exporting an Office 365 Group (Unified Group), then leave that switch out. Other parameters should be self explanatory.

@DustinB3403 said in Office365 on Android - Certificate Error:

While an MDM can limit what apps are allowed (or not allowed) the most simple usage is to tag company owned data.

This way if someone leaves the company with their personal cellphone, the MDM policy can wipe out anything tagged as company property.

@JaredBusch thanks for clarifying the point, that this policy is under the security settings. The app is moot to the policy being there or not if one exists at all.

To clarify further, there were no MDM policies set under Device Admin outside of what O365 already applies. I did remove that but that caused it to log out of the account/remove it and when I reconnected things, the problem went away as I anticipated. Still was curious as to why it was happening though. My best guess is what I previously mentioned about him connecting to an open hotspot and it causing the issue.

@NashBrydges said in Backing up Office 365:

@Dashrender @Jimmy9008 My largest client to use this for their Office 365 backup has 42 mailboxes and it works very well for them. I can't confirm with anything larger than that though.

In theory then it should work well for me. Will test and see. Thanks