blog.atwork.at

news and know-how about microsoft, technology, cloud and more.

Hop count exceeded-how to resolve a possible mail loop in Office 365

In this blogpost I will describe a solution for IT Administrators with the following situation: You are unable to receive E-Mails in your Office 365 account, senders receive a NDR (non delivery report). The NDR says: The following organization rejected your message: CH1EHSMHS012.bigfish.com. Diagnostic information for administrators: Generating server: bigfish.com martina.grom@mydomain.com CH1EHSMHS012.bigfish.com #<CH1EHSMHS012.bigfish.com #5.4.6 smtp;554 5.4.6 Hop count exceeded - possible mail loop> #SMTP# …this can be caused by a duplicate entry in FOPE! To get this situation resolved you don’t need a support call with Microsoft. You can solve it with a little PowerShell magic. First take a look in your Exchange Online Management Board where you can access the FOPE portal (if you are on an E-Plan) . Simply click on Exchange Online / Mail control / Forefront Online Protection for Exchange. Check if you see a duplicate entry within the Domain section in FOPE! If that’s the case you can set the entry with PowerShell. As I am aware that PowerShell is not everyone's most loved tool, here are all commands you have to run within PowerShell, so you can make your life easier with simply copy & paste from here. $LiveCred = Get-Credential $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic –AllowRedirection Import-PSSession $Session –AllowClobber Set-AcceptedDomain -Identity mydomain.at -OutboundOnly $true Set-AcceptedDomain -Identity mydomain.at -OutboundOnly $false After that, wait for approximately one hour. Check your FOPE entries. All should be set to normal and mail-flow starts working again! Attention: use this only if you are in the above mail loop situation. Hope that helps! Martina Grom, MVP Office 365. Follow me on Twitter

#MVP12 summit photo mosaic

@magrom and me, @atwork, had a great time at MVP 12 summit in Redmond! We met a lot of great people and had a lot of fun! We created a photo mosaic from our photos and photos of some other MVPs. MVP12 summit photo mosaic Our photo mosaic of #mvp12 summit made it into "What's new in the Microsoft MVPs world". Also there is some traffic with really nice tweets about our mosaic... thx!    Glad, you like it! Exactly there are 1.836 photos included in this DeepZoom mosaic. Again thanks to Olaf Engelke (about 930 photos), Oliver Sommer (the great title photo, 11 photos), Rainer Stropek (9 photos) and Toni Pohl (about 890 photos) for your photos! BTW: We have made some further DeepZooms. If you like this kind of presentation, see our Harley Davidson photo mosaic or WPC2010... Enjoy!

Passwordneverexpires-How to disable password policy settings in BPOS and Office 365 with PowerShell

Office 365 has a password policy, which is by default set to expire on a regular basis (90 days). There are some guidelines which help to make sure that the password is secure: Use 8 to 16 characters combination of upper- and lowercase letters at leat one numer or one symbol (be aware that the symbol is available in every language on every keyboard) Do not use spaces, tabs, line breaks, your user name Each user is able to change his password at any time. If a user forgets his password it can be reset by an Office 365 administrator. In some cases – for example for service accounts – it is useful to change the password expiration policy to never expire. In this post I will show you how you can disable the password expiration for Office 365 and for BPOS as well. Password Policy change to never expire in Office 365 In office 365 you need only two lines to disable the password policy. First open the Microsoft Online Services Modul for Windows Powershell. (Download: 32bit or 64bit). Connect to Office 365 Connect-MsolService In the dialog enter the credentials of an administrator: To change a single user: Set-MsolUser -UserPrincipalName <username> -PasswordNeverExpires $True To change all users at once: Get-MsolUser | Set-MsolUser -PasswordNeverExpires $True That’s it. You can control the result with the following command: Get-MsolUser | fl Password Policy change to never expire in BPOS You can also change the password policy for former BPOS accounts. Here we use a csv-File, which contains all enabled users: First of all you need PowerShell for Migration (Download 32bit and 64bit). Our first step is to export all users to a csv-File. $Cred = Get-Credential Get-MSOnlineUser -Credential $Cred -Enabled | select-object -property Identity | export-csv C:\data\user.csv Now you find a csv-File with your enabled BPOS Users. Our Script looks like that: $Cred = Get-Credential $Users = Import-Csv -Path "C:\data\user.csv" ForEach($User in $Users) {         $User.Identity         Set-MSOnlineUserPasswordNeverExpire –Identity $User.Identity –PasswordNeverExpire $true –Credential $Cred } Save the script as disableexpire.ps1 in the same directory as your user.csv file. In PowerShell start the script with this command: &"C:\Data\disableexpire.ps1" This is the result: All user account expiration settings have been changed. Please be aware that it is – for security reasons – a good idea to change your passwords frequently! //