Transport rule › Undocumented Features

April 8, 2022

Automatically copy managers on email

Recently, I was working with someone who related an interesting requirement: for a certain group of users, add their managers to the Bcc field.

Here’s how you can do it:

Depending on your Azure AD directory is populated, ensure that the users have a manager configured (either by editing the Manager field in your local Active Directory or by editing it in the Microsoft 365 admin center).

… [ Continue reading ]

November 21, 2017January 29, 2019

Block direct delivery to @onmicrosoft.com addresses in a hybrid environment

UPDATE: [11/20/2018] I had an error in the transport rule configuration in the last example, as well as a note that a TR would NDR external traffic. I have this post accordingly.

We’re all familiar with how Office 365 tenants work–when you spin up a new Office 365 tenant, you get a managed domain (tenant.onmicrosoft.com). … [ Continue reading ]

November 17, 2017November 29, 2021

Detecting Outlook / Exchange data exfiltration

*Updated 2021-11-29 with new links to the Audit Scripts*

While I was working on a script to configure Office 365 Secure Score settings, I came up with a few scripts that I thought would be helpful in monitoring your messaging environments. … [ Continue reading ]