@marcinozga said in Evaluating Defender ATP: @Dashrender said in Evaluating Defender ATP: @marcinozga said in Evaluating Defender ATP: @Dashrender said in Evaluating Defender ATP: @Obsolesce said in Evaluating Defender ATP: @marcinozga said in Evaluating Defender ATP: @Dashrender said in Evaluating Defender ATP: @marcinozga said in Evaluating Defender ATP: @Ambarishrh said in Evaluating Defender ATP: @marcinozga said in Evaluating Defender ATP: I was about to evaluate it to, I had a webex session with Microsoft sales, and while it looks nice, it doesn't really offer anything special over other solutions. And it's expensive, really expensive. Perthaps sales mislead me but we either had to subscribe to O365 E5 or M365, or get Windows 10 Enterprise licenses. It worked out to being 15-18 times more expensive than 3rd party antivirus solution. Not sure how did they gave you that info! An average pricing structure as below And security products straight from O365 admin portal subscriptions page: These are prices IF you already have one of their subscriptions. If you don't need them or have something else, you're paying $15-$20 per month per endpoint. That's how much it costs per year if you go with other av vendor. But as mentioned - $15-20 per year is only for typical AV, not an ATP product. And the difference between the two is.....? ATP is really just a marketing phrase at this point. Here are some features from "traditional" av: malware protection, both behavioral and definition based ransomware protection phishing protection ids/ips device control exploit blocker botnet protection web filtering memory analysis central management, either cloud or local And a full forensics audit trail? I'm really curious which ones have this stuff for 15-18 times less the cost of Defender ATP? I'm having a hard time finding what the real price here is? I know that Intune is like $4/user/month. aka $48/user/year. this makes it 2-3 times more expensive than typical AV packages - of course, it gives you a lot more features at that price point. The above posts have a dozen different security things listed. As @marcinozga says, typical AV with many of the above mentioned features (but not all - and full forensics trails - forget about it) for like $15-20/user/year ATP is not available if you have just Intune, you need O365 or M365 Enterprise subscriptions, or Windows 10 Enterprise. O365 E3 is $20/mo plus ATP add-on, I think it's $2/mo. I don't know how much is Win 10 Ent, so I'm guessing O365 E3 is the cheapest route, at $22/mo, that's $264 a year. Depending on number of endpoints you can get AV for $15/year, perhaps even less. That's an unfair assessment. If you already have O365 E3, then it's only $24/year/user Also - is O365 E3 the requirement, or can you add ATP onto E1? Is windows 10 Enterprise a requirement of ATP? Things I was reading last night never mentioned that. It is fair. What if you don't have O365 because you don't need it or use something else? Other AV don't force you to buy any extra services, you can get AV on a plain vanilla Windows machine. From the document I got from Microsoft, E3 is minimum. It's O365 E3 or Windows 10 Ent. If you're not in the O/M365 ecosystem already - then you likely wouldn't even consider this plan, you would likely look at another option... so yeah, it's not a fair comparison. Now, you could decide, since you are looking at this solution, that you might want to change your other solutions at the same time since MS has these bundled together... but you don't just line item this entire cost all on the ATP project, you split it out.

@JaredBusch I understand, I just close the annoying dialog and go on.

@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account: @scottalanmiller said in Sales Person Wants Me to Provide Independent Rep With an Email Account: My second thought is, if having an email account creates a security concern, it is not creating the account that creates the problem, it simply exposes an existing security problem. Not necessarily security, but accessing features like SFB, OD and Teams. But, as Kelly mentioned, they have Exchange Online P1, which doesn't have any of the other services (different than E1.) Right, i was assuming that they'd only get email. Even those other things, though, still have security. but no reason to think that you'd provision those, too.

can we get some tags added to this? o365 scan2email receiveconnector

@scottalanmiller said in Microsoft Office - Licensing Questions For 3 Scenarios: @flaxking said in Microsoft Office - Licensing Questions For 3 Scenarios: I think you must be missing what's going on here. This removes the requirement to integrate more directly with MS Office, instead relying on a separate library that is provided standalone from Office and thus allows saving to Excel. We've had zero issues with using this library, which is actually pretty uncommon for us. The issue is flexibility. Using third party libraries, you can integrate with Excel or with anything else. Using the Office libraries, every user, in ever system, is bound by the limitations of the most problematic. It makes deployments more costly, and more complex. That's true, it's the kind of self perpetuating lock-in that has served Microsoft so well. People use Excel, and they ask for saving to Excel spreadsheet, so we create the integration specially to allow Excel and not include ODF, then we help keep the industry locked into using Excel because that's all we support unless you want to just save to CSV. As for the cost and complexity of deployments... that could be true, except that the installation of our main software is already so complex and costly that dealing with potentially installing this library is the easiest part. I think we probably only have one other developer who would be able to figure out how to install it. I've never heard of any client's IT that have been able to figure out how to install it (just calls from those who have tried), client services has to do literally every install.

@davide-bonavita said in Moving from O365 E3 to Business Premium: It looks like you don't need to uninstall and reinstall Office Correct

@wrx7m said in Office 365 User Quarantine - How Do You Access After Redesign?: @dbeato said in Office 365 User Quarantine - How Do You Access After Redesign?: @wrx7m I have not found a way to do so, you can create a folder in Outlook to manage it from there. Example here http://www.expta.com/2015/02/how-to-add-access-to-office-365-eop.html Have you done this? The link that includes admin seems like it would try to access the admin portion, not the specific user's quarantine. If this works as I need, I wonder if there is a policy to set this up, or if it would be a manual, one-by-one endeavor. I have not but I can test.

Ah, the old reboot/reinstall/redo.

@scottalanmiller said in Excel - Portion of Sheets Blocked Out/ All Gray: @wrx7m said in Excel - Portion of Sheets Blocked Out/ All Gray: @scottalanmiller said in Excel - Portion of Sheets Blocked Out/ All Gray: @wrx7m said in Excel - Portion of Sheets Blocked Out/ All Gray: Adding swapping out RAM to the list. Haven't gotten any word back as to whether or not it has fixed it. Just found out that the user will be in China for a week and a half, so I won't really be able to try much. That'll slow things down. Swapping RAM or him being out of the country? Being out of hte country. OK lol. I thought that is what you meant.

@wrx7m said in PowerShell - Off-boarding Script: @dafyre said in PowerShell - Off-boarding Script: @wrx7m said in PowerShell - Off-boarding Script: @dafyre I think I found where you got it - https://www.powershelladmin.com/wiki/Powershell_prompt_for_password_convert_securestring_to_plain_text Anyway, I am not sure where, in my script, I should place that function. You'd put the actual function at the top of your script, and then just $myPassword=convertFrom-SecureToPlain -securepassword $MySecurePassword Wherever you need the password in plain text form. Thanks. It mostly works. The only problem is that it isn't actually using the password I specify at the top. It is somehow generating its own and then writing it at the end. I put in write-host "Plain Text Says: $plainText" and it shows the password that I typed in for the secure variable at the beginning, followed by the one that it generated. Plain Text Says: $#@%4#@177 Jof91348 Works fine for me here.... Check and make sure you don't have an extra write-host or anything somewhere.

@dbeato said in Office 365 Moving Emails to Deleted Items: @dafyre said in Office 365 Moving Emails to Deleted Items: @dbeato said in Office 365 Moving Emails to Deleted Items: @dafyre said in Office 365 Moving Emails to Deleted Items: e got a strange one... I have a user here whose Emails go from whatever folder they are in to the Deleted Items folder after being read... Sometimes. Sometimes it doesn't happen for several minutes, and other times it happens right away. The user hasn't been phished that we can tell. No bogus rules in Outlook forwarding things to the deleted items. Check both Web and Outlook 2016. What am I not looking at that could be causing this? They got hacked though https://blogs.technet.microsoft.com/office365security/how-to-fix-a-compromised-hacked-microsoft-office-365-account/ https://docs.microsoft.com/en-us/office365/securitycompliance/responding-to-a-compromised-email-account Sometimes the rule is a dot on the name.... I am assuming it's a hacked account, but we changed the password to a new one. I disconnected all of her sessions from Office 365. Still happening. I see no rules with a dot in the name... or spaces or foreign characters. I see exactly the number of rules on my CLI as I do in Outlook and OWA. Can you clear them all ? Take a screenshot of the settings and then remove them and see what changes. The rules run autonomously and is not someone running them. That's what we've done now. All of the rules are disabled. End-user is turning them back on one at a time now.

@DustinB3403 said in Office 365 OWA blocks Microsofts own content: Would you really want MS making exceptions on your behalf and without your knowledge? I don't have a safe senders list. Yet I get attachments and links all the time. More than likely, the DKIM/SPF checks failed to cause that.

@LilAng said in Copy / Paste from Excel on Mac to Outlook Web Access Creates Image Rather than Table: In Excel, use File > Save as web page, then attach the web page to your email message? Yeah, we found that process. That's a pretty huge "fail" process.

I have a script that I wrote to do this. https://gitlab.com/dafyre/powershell-utils/raw/master/export-O365Group.ps1 It gets you the person's DisplayName and their email address. If you're exporting a Distribution List, just add the -distributionlist switch. If you're exporting an Office 365 Group (Unified Group), then leave that switch out. Other parameters should be self explanatory.

@DustinB3403 said in Office365 on Android - Certificate Error: While an MDM can limit what apps are allowed (or not allowed) the most simple usage is to tag company owned data. This way if someone leaves the company with their personal cellphone, the MDM policy can wipe out anything tagged as company property. @JaredBusch thanks for clarifying the point, that this policy is under the security settings. The app is moot to the policy being there or not if one exists at all. To clarify further, there were no MDM policies set under Device Admin outside of what O365 already applies. I did remove that but that caused it to log out of the account/remove it and when I reconnected things, the problem went away as I anticipated. Still was curious as to why it was happening though. My best guess is what I previously mentioned about him connecting to an open hotspot and it causing the issue.

@NashBrydges said in Backing up Office 365: @Dashrender @Jimmy9008 My largest client to use this for their Office 365 backup has 42 mailboxes and it works very well for them. I can't confirm with anything larger than that though. In theory then it should work well for me. Will test and see. Thanks

@flaxking said in Office 365 SMTP server not advertising StartTLS: No idea, we don't manage the client's infrastructure Then it was definitely the UTM, no question.

Now, we are getting reports from many of our own users that things are getting resolved. However, not from the person who opened the ticket to us yet, so even our ticket for the issue (and this thread) are "open". There is more tracking in both our tickets and in ML of MS' failures than MS tracks themselves. Doesn't that alone tell us how much MS is trying to falsify the data by closing early before there is a resolution? When they report on this in the media, they will used those closed tickets as "evidence" of the issue having been resolved earlier than it really is.

Added tags.

@Pete-S There were a few reasons I didn't do byod. Configuration of the tablet and the app If I had issues, I would have to deal with 2 companies. Also, I got 10% off of the whole price, making it much closer to the byod option. It was $1798-$180=$1618 to have the things ready to rock out of the box. For the $82 difference, it would have been a break even or even cost more for me to do the configuration. Edit - Another thing was I didn't know which model the tablet was going to be. It only said 10" Philips LED.

I have a laptop that isn't kicking back that TLS error in that Office tool. I have tried moving another system that does get the TLS error into the same OU as the laptop and ran gpupdate /force and rebooted, also brought Windows fully current and uninstalled Webroot. Can't figure out the difference

@dbeato said in Exchange / Office 365 Auto Response from Public Folder: @scottalanmiller said in Exchange / Office 365 Auto Response from Public Folder: @travisdh1 said in Exchange / Office 365 Auto Response from Public Folder: @scottalanmiller said in Exchange / Office 365 Auto Response from Public Folder: We have a public folder on Office 365 that is email enabled, the customer would like an auto-response from the public folder. I'm not sure if that is even possible. Wouldn't that be an auto-response setup from one of the accounts that receives those emails? Does that work with a public folder? Yes, with Folder Assistant through Outlook. Otherwise you can create a rule for incoming emails through Office 365 to accomplish that too. Yeah, seems... poor. Found this for doing it through Outlook, which would be unreliable and clearly not useful. https://www.codetwo.com/admins-blog/setting-public-folder-auto-reply/

@mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!: @dbeato said in Mail stuck in Office 365, Enterprise Exchange queue!: @mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!: A few users are having issues sending out emails. Not everytime, but intermittent. Has anyone experienced this type of issue before? I can use all the help I can get. I would like to know how to release the emails and avoid emails getting stuck again. In advanced, thank you for your efforts. Have any of your users been not able to send at all? I am not seeing that right now. Great question dbeato! Here's the thing, I myself tried to email the same address while monitoring it from Barracuda. Nothing showed up as going out. It's strange cause we received email from the address. So it is on the received end of Barracuda?

M.B.A. Applications Decline at Harvard, Wharton, Other Elite Schools as Degree Loses Luster

@dustinb3403 said in How Do You Stop Office 365 Low Severity Alert Emails: As a general thought on this, automatic mail forwarding could be a compliance issue, so make sure to keep this in mind before you go turning off alerts that might be a compliance issue later on. . . Automatic mail forwarding is a "every few hours" task. So these alerts are a ridiculous amount of crying wolf. It's created a "zero belief" system in MS alerts. At this point, there are no alerts, just spam, is how it is seen.

@matteo-nunziati said in Outlook 2016 Export to PST Missing a Lot of Data: @scottalanmiller said in Outlook 2016 Export to PST Missing a Lot of Data: @obsolesce said in Outlook 2016 Export to PST Missing a Lot of Data: You can right-click on the mailbox, or a folder, and in properties, you can see how much data is there versus on the Exchange server. Most is there, for sure. But definitely not "all". Confirm. I got always this end result. This is just best effort. Not complete at all. That's just crappy, especially as Microsoft themselves recommend it.

@coliver said in Receipt Logs for Office 365 Emails: @momurda said in Receipt Logs for Office 365 Emails: @coliver This is done whenever MS feels like it, yes? I mean, you may not get the results for a while. Nope it's done whenever you submit the search. It's stupid powerful. I do one at least once a week and never have had to wait more then a few minutes. Yep, that’s my experience as well.

You can use Powershell as well Set-MailboxAutoReplyConfiguration -Identity username -AutoReplyState disabled

@jaredbusch said in Does Office 365 Support Plus Notation in Email (+): @scottalanmiller said in Does Office 365 Support Plus Notation in Email (+): @kelly said in Does Office 365 Support Plus Notation in Email (+): The period notation is really annoying for me. I signed up [email protected] when it was in beta and this "feature" wasn't publicized. Years later someone else was able to register [email protected] and now I get DoTerra order details and the like. I have no idea what I don't get at this point. Don't know about a period notation feature. What does that do? And how do that not break email globally? The same way that + doesn't break it. It is outside of the RFC altogether. So as long as wtf ever service you sign up for lets you type it, then you can do it. As for what it does. Well [email protected] is a common thing. But someone that signs up to gmail with [email protected] can also receive email from email sent to [email protected] or even [email protected] Google simply ignore all periods on the left of the @ for gmail based email addresses. Gmail only, not GSuite. Wow, that's.... weird. I guess it works until they do something like the story above and screw it up.

@brrabill said in Nextcloud replacing OneDrive: @scottalanmiller said in Nextcloud replacing OneDrive: @brrabill said in Nextcloud replacing OneDrive: Hmmm, sounds like one of those "MS messed up" scenarios we were discussing in the backup thread(s). Yes, but it's also a "it didn't lose them their data" because they had local copies, scenarios we were also discussing. So a good example of both. Actually it sounded like MS found them and put them back. Local copies would also have been removed if they were "deleted" at the MS side. Good point. The real problem here is the "customer shaming" that MS always does. Anytime MS is at fault, they try to shame the customer. Whether it is through official channels or "look the other way" as their engineers go into communities and do it. MS employees are out there attacking any customer that dares to mention that they've had a problem. Like in this thread. Even once MS had admitted the mistake, and fixed it, an MS employee was still on the offensive trying to shame the customer and went ballistic once it was obvious he didn't even know how MS products worked.