Multi-Factor Authentication in Office 365 (Part 2)


wp_ss_20140521_0001Multifactor Authentication is a must-have for services based in the cloud, especially for accounts with administrative purposes. We have already covered what Office 365 Multifactor Authentication is and how to configure it in Office 365 tenants with the Office 365 admin center, and we briefly showed the end user experience. Now we will look at how we can use the Azure Active Directory Module for Windows PowerShell to configure Office 365 authentication with MFA.

Azure Active Directory Module for Windows PowerShell (AADMPS) enables organizations to not only configure MFA for existing end users who use PowerShell, but also enhance their current provisioning process with MFA options. By pre-configuring MFA, administrators can prevent end users from having to go through the initial MFA setup process and use their currently configured mobile phone or office number for verification.

Read the full article over on SearchExchange

The UC Architects Podcast Ep40


iTunes-Podcast-logo[1]We’re glad to announce the availability of episode 40 of The UC Architects podcast.

This episode is hosted by Pat Richard, who is joined by Michael Van Horenbeeck, Dave Stork, John A Cook, Stale Hansen, Andrew Price and Michel de Rooij. Special guest is Tony Redmond. Editing was done by Andrew Price.

Topics discussed in this episode are:

  • Learn why Alternate Login ID is Office 365′s hidden gem
  • Exchange and Antivirus Exclusions – Still A Critical Conversation
  • Microsoft explains roots of this week’s Office 365 downtime
  • Office 365 for business public roadmap
  • Is Microsoft really saying “don’t virtualize” Exchange?
  • Why running Exchange on Azure is an unattractive proposition
  • June updates for Lync client (KB2881013, KB2850074)
  • Lync for Mac update—E911, video & file-sharing enhancements (14.09)
  • Using Lync like a LyncPro
  • New Tool: Change Lync Conferencing Dial-In Number Display Order (GUI)
  • Port 5088 Missing from Lync 2013 Documentation
  • Call Quality Methodology scorecard for Lync Server
  • Cisco and Microsoft Lync Content Sharing
  • SIP Pinger Tool
  • Verify Lync QoS settings with this little script
  • Content Switching with Exchange and Lync-related Workloads
  • 74-338 course overview

More information on the podcast including references and a link to download the podcast here or you can subscribe to the podcasts using iTunes, Zune or use the RSS feed.

About
The UC Architects is a bi-weekly community podcast by people with a passion for Unified Communications; our main focus is on Exchange, Lync or related subjects.

Exchange and NFS – A Rollup


imageA short write-up after some recent articles which were published to clarify and emphasize Microsoft’s current position on virtualization and the support for storing Exchange information on NFS volumes. I will stick to the headlines, as the topic has already been touched several times by people from the Exchange community, after which I would mostly be repeating things that have already been said. Yet, many customers still have the perception that Exchange on NFS is supported or are actually running this configuration, often the result of a push from the storage or virtualization vendor. As it is not, I will repeat key information here to counter misleading information, hoping it might prevent customers from selecting unsupported configurations.

End of last year, a lively discussion was revived on some distribution lists and forums on why NFS was still not supported for storing Exchange information. However, it was all speculation as the creator of the product did not take part. The official support statement was (and is) that Exchange is not supported on NFS and only block-level storage is supported. Tony Redmond did a write-up on that here.

Then, in the preamble of the Microsoft Exchange Conference 2014, a ‘suggestion’ to support NFS was put on the community ideascale site, where people can propose suggestions for Exchange. This site is not an official channel but it does provide a way for the community to gather suggestions and check for demand. So, it allowed to verify if the current lack of NFS support was major thing or not, as people producing the most noise do not necessarily represent the majority. Response seemed limited, except for some hardware vendors who made lots of noise, possibly in an attempt to get traction in the Exchange community.

Then, Tony did a follow-up article after a discussion with Jeff Mealiffe, knowledgeable on Exchange, Sizing and Virtualization and nicknamed ‘The PerfGuy’ for obvious reasons. In the article, the problem areas of NFS are set out. Interestingly (but not surprising), Exchange is similar to SQL Server from a storage perspective, the latter having very specific documentation regarding storage requirements. Also mentioned is that successfully running JetStress by the vendor is no indication on the supportability of storage configurations. After all, that JetStress succesfully runs for a certain amount of hours is great, but it is a storage performance validation tool, not a storage supportability validation tool. At the Microsoft Exchange Conference 2014, using arguments presented earlier in the article, Jeff reaffirmed the non-support of NFS in his presentation.

The discussion seemed to die down until few weeks ago when Tony was in a Twitter conversation with one Josh Odgers, engineer at one of the storage vendors. In the discussion Odgers dropped the rationale and even went so far as to insult people. When searching online, you will find other rants as well, so I guess Josh’ employer does not have any form of social media guidelines for their employees. That does not help when you are trying to lobby for your cause (and potential markets for your storage appliances). Tony wrote an extensive response here, I recommend checking it out.

Now what storage vendors and their employees do or do not do is up to them. However, things like this may become an issue when vendors repeatingly and knowingly position their storage solution as a supported alternative to customers, like for example Odgers does for Nutanix (NDFS is Nutanix’ proprietary distributed NFS implementation). Yes, I’m sure it flies like a rocket and I am sure some customers will be persuaded by sales people to a game of chance by running Exchange on their appliances. As an Exchange consultant however, I prefer supported solutions and so should you. Or have a serious chat with the Risk Manager.

Update (Jul 9,2014): The UC Architects fellow Mahmoud Magdy posted a blog on his experiences and encountered limitations of storage appliances such as Nutanix here.

Forefront TMG 2010 SP2 Rollup 5


ForeFrontA short notice for those utilizing TMG in their environment on the release of Rollup 5 for Microsoft Forefront Threat Management Gateway (TMG) 2010, Service Pack 2 (KB2954173).

Changes in this update:

  • 2963805 Account lockout alerts are not logged after you install Rollup 4 for TMG 2010 SP2
  • 2963811 FIX: The TMG Firewall service (wspsrv.exe) may crash when the DiffServ filter is enabled
  • 2963823 “1413 Invalid Index” after you enable cookie sharing across array members
  • 2963834 HTTPS traffic may not be inspected when a user accesses a site
  • 2967726 New connections are not accepted on a specific web proxy or web listener in Threat Management Gateway 2010
  • 2965004 EnableSharedCookie option doesn’t work if the Forefront TMG service runs under a specific account
  • 2932469 An incorrect value is used for IPsec Main Mode key lifetime in Threat Management Gateway 2010
  • 2966284 A zero value is always returned when an average counter of the “Forefront TMG Web Proxy” object is queried from the .NET Framework
  • 2967763 The “Const SE_VPS_VALUE = 2” setting does not work for users if the UPN is not associated with a real domain
  • 2973749 HTTP Connectivity verifiers return unexpected failures in TMG 2010

TMG support will end on April 14th, 2015 and extended support will end on April 14th, 2020.

You can request Forefront TMG SP2 RU5 directly from support here.

The UC Architects Podcast Ep39


iTunes-Podcast-logo[1]We’re glad to announce the availability of episode 39 of The UC Architects podcast.

This episode is hosted by Steve Goodman, who is joined by Johan Veldhuis, Dave Stork, John Cook, Tom Arbuthnot and Michel de Rooij. Editing was done by Andrew Price.

Min topics discussed in this episode are:

  • Exchange 2013 CU5 (Release, Hybrid Improvements, OAB Improvements)
  • Exchange 2010 SP3 UR6
  • Discussion about Exchange storage (Steve’s Article, VMware KB)
  • Open Specifications Posters for Office client, Lync, SharePoint, Exchange, SQL Server, and Windows
  • Exchange Server 2013 Platform Options poster
  • DLP from Exchange coming to OneDrive for Business and SharePoint
  • myBulletins, tool that provides personalized list of the security bulletins
  • Lync Room System (LRS) v15.10 May update out for Smart with fixes and enhancements
  • Lync Callback Reminder
  • XenDesktop Certified on Lync 2013
  • Update 2880980 for Lync 2013
  • Lync 2013 support for SQL AlwaysON
  • Beta release of Azure AD Sync via Connect
  • UC Birmingham User Group August

More information on the podcast including references and a link to download the podcast here or you can subscribe to the podcasts using iTunes, Zune or use the RSS feed.

About
The UC Architects is a bi-weekly community podcast by people with a passion for Unified Communications; our main focus is on Exchange, Lync or related subjects.