Exchange Online

Set Up Plus Addressing for Admin Notifications

Licensing Microsoft Entra administrator accounts for email is a common practice, but it introduces avoidable security risks. Privileged accounts should remain isolated from unnecessary communication channels to minimize vulnerabilities. This guide shows how to set up email notifications for admin accounts without assigning them a mailbox license. We’ll also include visual steps for enabling plus …

Understand Opportunistic TLS and Email Encryption: A Deep Dive into S/MIME, Purview Message Encryption, and Secure Email.

This entry is part 1 of 2 in the series Email encryption

Enhancing Email Security: Opportunistic TLS and Encryption Solutions In Part 1 of this series, we explored how SMTP DANE and DNSSEC collaborate to secure email communications in Exchange Online, ensuring authenticity and encryption between servers. In this follow-up, we focus on two critical components of email security: Opportunistic TLS and email encryption. Specifically, we’ll examine …

Boosting Email Security with SMTP DANE and DNSSEC: A Complete Guide

This entry is part 1 of 2 in the series Email encryption

Introduction to SMTP DANE and DNSSEC Securing email communication is critical in the modern digital landscape. SMTP DANE (DNS-based Authentication of Named Entities) and DNSSEC (Domain Name System Security Extensions) are two technologies that strengthen email security by protecting against DNS-based attacks and ensuring encrypted connections between mail servers. What is DNSSEC? DNSSEC enhances the …

Understand DMARC – and use it NOW.

What is DMARC DMARC, which stands for Domain-based Message Authentication, Reporting, and Conformance, is a crucial email authentication and anti-phishing technology designed to enhance the security of email communication. It helps organizations combat email fraud, phishing attacks, and unauthorized use of their domain names by allowing domain owners to specify policies for how their email …

Directory-Based Edge Blocking causing 550 5.4.1 NDR

Issue Overview A customer faced a problem where all new users created in the past week and newly added proxy addresses failed to receive emails from external senders due to Directory-Based Edge Blocking causing 550 5.4.1 NDR. Internal emails worked fine, but external messages were rejected with the error: 550 5.4.1 [user@Customerdomain.com]: Recipient address rejected: …