Skip to content

Instantly share code, notes, and snippets.

View Apoc70's full-sized avatar

Thomas Stensitzki Apoc70

View GitHub Profile
@Apoc70
Apoc70 / Set-TLS12.ps1
Last active May 17, 2024 16:15
PowerShell script to enable TLS 1.2 in preparation for Entra ID Connect, and to disable legacy TLS for Exchange Server 2019.
param (
[switch]$DisableLegacyTls
)
# Last updated: 2024-02-21
if($DisableLegacyTls) {
# Disable TLS 1.0 and 1.1
# Following https://learn.microsoft.com/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-tls-configuration?view=exchserver-2019&WT.mc_id=M365-MVP-5003086
# Disable TLS 1.0
@Apoc70
Apoc70 / Get-ExchangeInfo.ps1
Last active May 2, 2024 08:38
Get Exchange org information for on-premises or Exchange Online as Xml
<#
.SYNOPSIS
This script exports On-Premises Exchange Org and Exchange Online Org configurations to Xml
.DESCRIPTION
The script exports dat using Export-CLixml to the folder \Output
You must create the folder prior to excurting the script.
.PARAMETER Environment
The envrionment to query, either OnPremises or ExchangeOnline
@Apoc70
Apoc70 / Get-ExchangeSecurityGroupsNestedMembers.ps1
Last active November 30, 2023 09:19
Export Exchange security group members
# This script exports all Exchange security groups that have members
# Empty groups are not included in the CSV output.
# Your domain DN
$Domain = 'DC=varunagroup,DC=de'
# Preferred domain controller FQDN
$DomainControllerFQDN = 'testms01.varunagroup.de'
# Fetch Exchange security groups
@Apoc70
Apoc70 / Get-IisTlsBindings.ps1
Created October 25, 2023 13:28
Query the current IIS SSL Bindings and provide the IIS Site and bound certificate as output
# Original source: https://techstronghold.com/scripting/@rudolfvesely/powershell-script-to-get-all-iis-bindings-and-ssl-certificates/
# Updated the script for a sorted output on Exchange Servers
Import-Module -Name WebAdministration
Get-ChildItem -Path IIS:SSLBindings | Sort-Object Port | ForEach-Object -Process `
{
if ($_.Sites)
{
$certificate = Get-ChildItem -Path CERT:LocalMachine/My |
@Apoc70
Apoc70 / Single-Name-Certificate-Request.inf
Last active September 13, 2023 13:13
Beispiel einer .inf-Datei für die Erstellung eines Einzelnamen-Zertifikates
[Version]
Signature="$Windows NT$"
[NewRequest]
Subject = "CN=mail.varunagroup.de,OU=IT,O=Varunagroup AG,L=Berlin,S=BE,C=DE" ; Remove to use an empty Subject name.
Exportable = TRUE ; TRUE = Private key is exportable
KeyLength = 2048 ; Valid key sizes: 1024, 2048, 4096, 8192, 16384
KeySpec = 1 ; Key Exchange – Required for encryption
KeyUsage = 0xA0 ; Digital Signature, Key Encipherment
@Apoc70
Apoc70 / SAN-Certificate-Request.inf
Created June 16, 2018 17:39
Beispiel einer .inf-Datei für die Erstellung eines SAN-Zertifikates
[Version]
Signature="$Windows NT$"
[NewRequest]
Subject = "CN=mail.varunagroup.de,OU=IT,O=Varunagroup AG,L=Berlin,S=BE,C=DE" ; Remove to use an empty Subject name.
Exportable = TRUE ; TRUE = Private key is exportable
KeyLength = 2048 ; Valid key sizes: 1024, 2048, 4096, 8192, 16384
KeySpec = 1 ; Key Exchange – Required for encryption
KeyUsage = 0xA0 ; Digital Signature, Key Encipherment
# Get EXO mailboxes by size
Get-ExoMailbox -RecipientTypeDetails UserMailbox -ResultSize Unlimited | Get-ExoMailboxStatistics | Sort TotalItemSize -Descending | Format-Table DisplayName, TotalItemSize, ItemCount
# New B2B user email address
$newEmailAddress = "user@setebos-ag.com"
# Update primary SMTP address for a selected user
$B2BUserToUpdate = 'USER_varunagroup.de#EXT#'
Set-MailUser $B2BUserToUpdate -ExternalEmailAddress "SMTP:$newEmailAddress" -WindowsEmailAddress $newEmailAddress
# Fetch all mail users
$DomainNameFilter = '*varunagroup.de'
Get-MailUser -ResultSize Unlimited | ?{$_.ExternalEmailAddress -like $DomainNameFilter} | Sort-Object DisplayName | Select-Object DisplayName, PrimarySmtpAddress
@Apoc70
Apoc70 / MessageModify.cs
Created March 10, 2023 17:24
Example for intercepting email messages in an Exchange 2010 transport queue
// AttachmentModify
// ----------------------------------------------------------
// Example for intercepting email messages in an Exchange 2010 transport queue
//
// The example intercepts messages sent from a configurable email address(es)
// and checks the mail message for attachments have filename in to format
//
// WORKBOOK_{GUID}
//
// Changing the filename of the attachments makes it easier for the information worker