Monthly Archives: April 2015

Configure Office 365 to block executable attachments, even within ZIP files

Uncategorized
  1. Log into your Office 365 organization with an Admin account.
  2. Click on the Admin in the upper right hand corner and select Exchange.  Go to Mail Flow on the left, make sure you are on Rules
  3. Click the + to Create New Rule.  Name it Block EXE or something you’ll understand
  4. Click the More Options… link.
  5. In the Apply this rule if… drop down select Any attachment has executable content
  6. In the Do the following… drop down select Block the message -> Reject the message with the explanation… and type in Attachment contains an executable.  This will trigger a Transport Rule response to the sender with that explanation.
  7. Leave the Audit this rule with severity level: checked drop down as is (Not specified).
  8. Choose a mode for this rule: radio button should be on Enforce.
  9. Now click Save.  and you should see the rule detail on the right.

How to Disable Password Expiry and Password Complexity Rules in Office 365

Uncategorized

If you want to stop Office 365 passwords from expiring and / or you want to eliminate the password complexity requirements you must use PowerShell as these changes are not permitted through the Office 365 admin pages

  1. Download the Office 365 Online Services Module here
    https://support.office.com/en-ca/article/Windows-PowerShell-cmdlets-for-Office-365-06a743bb-ceb6-49a9-a61d-db4ffdf54fa6 and install it
  2. Start the module (click the START BUTTON and type MODULE and select
    Windows Azure Active Directory Module for Windows PowerShell
    and be sure to right click and RUN AS ADMINISTRATOR
  3. Connect to your Office 365 using:
    Connect-MsolService
  4. Enter your Office365 username and password at the prompt
  5. Set all Office365 passwords to never expire using:
    Get-MsolUser | Set-MsolUser -PasswordNeverExpires $True
  6. Set all Office 365 passwords to not have any complexity requirements:
    Get-MsolUser | Set-MsolUser -StrongPasswordRequired $false
  7. Enjoy not having insane password requirements!

If you want to confirm the results use:

  1. Get-MSOLUser | Select UserPrincipalName, PasswordNeverExpires
  2. Get-MSOLUser | Select UserPrincipalName, StrongPasswordRequired