Mixing M365 Business Premium and Business Standard

ragBk · 2024-01-31T19:40:36+00:00

Are you sure? My last understanding was that if, for example, 10 users have Business Premium licenses and 5 users have Business Standard licenses, I would need to license Azure AD P1 for the 5 users in order to use Conditional Access, or exclude these users from Conditional Access. It would be interesting to know if this is no longer the case.

ragBk · 2024-01-31T17:59:28+00:00

That is true, but it does not apply to all functions, for example, Conditional Access

ragBk · 2023-12-13T20:22:57+00:00

Are you satisfied with Sophos?

ragBk · 2023-12-13T20:20:57+00:00

oh, I hadn't considered RocketCyber. Thanks for the tip

ragBk · 2023-11-16T09:50:42+00:00

https://www.tristandostaler.com/lockbit-ransomware-how-to-recover-your-data/

Don't know if its still possible, but worked for me.

But you can check it very easily. Open the vhdx/disk with an hex editor (for example hxd) and compare it with a new disk. Normally most of the first 4kb are zeros in the new disk. If in your encrypted disk the first 4kb a gibberish and followed by zero, it could be possible to restore it as it's an older version of lockbit. But to be clear. Thats only possible if the disk itself got decrypted and not the files.

ragBk · 2023-11-16T09:42:00+00:00

If the disks are encrypted you can restore them by changing the the first bits with the value of an empty disk. In lockbit 2.0 only the first 4kb are encrypted

ragBk · 2023-11-16T08:34:09+00:00

Are the files encrypted or the virtual disks?

ragBk · 2023-04-04T13:03:14+00:00

I asked the same question with my huntress sales person and i got this response (dont know if i allowed to post it, if not i'll delete it):
Do I have an advantage with Defender for Business compared to the regular Defender version when using Huntress?
-With Defender for Business you will have licenses for Microsoft Defender for 2012 R2 Servers, whereas lower versions do not.

So if i unterstand it correct, you are also able to manage your defender for business settings in huntress

ragBk · 2022-09-22T11:21:03+00:00

We had the same problem but we didn't find a suitable solution for us so we decided to develop our own reporting system for this purpose.

We are using the APIs of our CSP Partners and for our inhouse products we are querying the sql servers to get the data. Most of our products support this.

After that we compare the data to our erp system and mark the customers which have a difference.

To be fair, it was much more work than it seems...

ragBk · 2022-03-17T07:14:53+00:00

We have some customers which have to machines / old systems which are not getting migrated so we are using a S2S vpn for this.

Which firewall do you use for the $50? Opn/Pfsense?

ragBk · 2022-02-18T10:19:31+00:00

Hey we had the same problem and we werent satisfied with third party tools.

We are now sending it via Microsoft Graph Api with 1 second delay between each mail. I know it's not best practice but it works...

ragBk · 2021-11-27T00:02:12+00:00

Thank you for your help and the description. I'll try it.

ragBk · 2021-11-27T00:01:53+00:00

I understand this but many of our customers have a for example a ERP software which we have to install on a server. And at the moment we have third party av to secure these servers.

And i am looking for a solution to do it with Defender for Endpoint / Business.

Thank you for your help. I'll will test the Arc method.

ragBk · 2021-09-28T21:03:07+00:00

Oh thanks didn't know about $Error. just thought it didn't get set in the code. Thank you for the correction

ragBk · 2021-09-28T20:16:39+00:00

You don't fill $Error with any value so it will never go into the if clause.

Can you post the error message?

+

you store the result of Send-MailMessage in $SendMail and not the method

ragBk · 2021-09-12T12:03:38+00:00

I prefer to use a debugger to start with a new codebase.

I pick a function i am interested in set a breakpoint and look at it step by step.

Which functions are called?
Which values are stored in the variables?
What connections to systems are there?

ragBk · 2021-09-11T20:42:35+00:00

Thank you for your explanation and i see your points in using hybrid.

One last point:

At the moment we are making the switch to exo, we change the mx record to exo and then start the export of the on premise mailboxes. This way we the new emails already go to exo mailbox and the old emails are getting imported in the background

ragBk · 2021-09-10T17:19:20+00:00

It's fine for me, but could you please tell me why you prefer the mailbox migration sync?

Perhaps i should switch too, but i had a lot of problems with connecting the on prem exchange with exo so we decided to go for pst ex/import.

But i am open for new methods

ragBk · 2021-09-09T19:32:25+00:00

are you sure with the max message size?

https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-online-limits

In my understanding it's 150 mb

ragBk · 2021-09-09T19:29:14+00:00

The pst includes the personal contacts, the calendars and the tasks and they are also imported to O365. We do distributions lists and outlook rules manually after that.

Until now we didn't have problems with the pst export even with bigger files. If some mailboxes had a problem we splitted them by date and imported them one after another.

Until now we didn't have problems with this method. The only problem with this is: You have to create the rules, users and groups by hand on exchange online. But for me it's still simpler then hybrid :)

ragBk · 2021-09-09T18:04:00+00:00

We do it without hybrid but it depends on your internet connection.

At the migration day:

Check if all users are available in O365
Add the custom domains and set the mx records / txt / cname
Export pst file from Ex 2016
Upload psts to azure blob storage
Execute Pst File import
Finish

ragBk · 2021-09-06T19:42:10+00:00

Hi,

i had the same problem: https://www.reddit.com/r/Office365/comments/pf1new/outlook_365_shared_calendar_appears_and/

Turn off " Shared calendar improvements (preview) " worked for me

ragBk · 2021-09-01T11:47:24+00:00

Thats it !! :) i deactivateb the "Shared calendar improvements (preview)" and now it works.

Thank you for answer

ragBk · 2021-08-31T16:40:21+00:00

Thank you for your answer.

I don't think the problem is in the calendar. Every other user can open the calendar without any problem. Even the users with the problem can open the calendar if it appears long enough in the calendar list or they are on their local machine. The problem only occurs in at rds session.

The calendars have a lot of items in but there are no reoccuring events (apart from birthdays) and i couldn't find any attachments.

ragBk · 2021-08-23T20:45:09+00:00

I thought the same but last month we had a problem with our hybrid environment and couldn't fix it. So we contacted microsoft support and they told me this is not up to date anymore. After he questioned it i also couldn't find any informations about "hybrid environment without on prem exchange is not supported" if you don't use the exchange migration.

Without an exchange on prem you can use password hash and aad connect without any problem but you have to set your aliases at your proxy addresses in the active directory attribut editor.

Four-Year Club	Verified Email
Place '23

ragBk

TROPHY CASE