Apoc70

# This script clears the legacyExchangeDN attribute of AD objects if the attribute is set to ADCDisabledMail

# Active Directory search base, adjust as needed for your AD 
$SearchBase = 'DC=VARUNAGROUP,DC=DE'

# Our search filter
$Filter = 'legacyExchangeDN -eq "ADCDisabledMail"'
$csvFilename = 'ADCDisabledMail-Users.csv'

# Search for user objects matching the filter in the defined search base

Apoc70

param (
    [switch]$DisableLegacyTls
)
# Last updated: 2024-02-21

if($DisableLegacyTls) {
    # Disable TLS 1.0 and 1.1
    # Following https://learn.microsoft.com/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-tls-configuration?view=exchserver-2019&WT.mc_id=M365-MVP-5003086

    # Disable TLS 1.0

Apoc70

# Update the User Principal Name for all User Objects
$CustomDomain = "mcsmemail.de"

# Add custom domain as suffix first
Get-ADForest | Set-ADForest -UPNSuffixes @{add=$CustomDomain}

# Update all user objects
Get-ADUser -Filter * -Properties SamAccountName | ForEach-Object { Set-ADUser $_ -UserPrincipalName ($_.SamAccountName + "@$($CustomDomain)" )}

Apoc70

[Version]
Signature="$Windows NT$"

[NewRequest]
Subject = "CN=mail.varunagroup.de,OU=IT,O=Varunagroup AG,L=Berlin,S=BE,C=DE" ; Remove to use an empty Subject name.

Exportable = TRUE ; TRUE = Private key is exportable
KeyLength = 2048 ; Valid key sizes: 1024, 2048, 4096, 8192, 16384
KeySpec = 1 ; Key Exchange – Required for encryption
KeyUsage = 0xA0 ; Digital Signature, Key Encipherment

Apoc70

[Version]
Signature="$Windows NT$"

[NewRequest]
Subject = "CN=mail.varunagroup.de,OU=IT,O=Varunagroup AG,L=Berlin,S=BE,C=DE" ; Remove to use an empty Subject name.

Exportable = TRUE ; TRUE = Private key is exportable
KeyLength = 2048 ; Valid key sizes: 1024, 2048, 4096, 8192, 16384
KeySpec = 1 ; Key Exchange – Required for encryption
KeyUsage = 0xA0 ; Digital Signature, Key Encipherment