Try our new Certificate Revocation List Check Tool
CRLcheck.exe is a tool developed to verify digital signatures of executable files. It collects files from known paths on your client, checks their signature, and checks Certificate Revocation Lists (CRL) and OCSP download. This helps avoid delays in launching files.

M365/Exchange Hybrid OAuth Testing command, OAuth-Cert out-of-sync 4001, IIS VDIR OAuth wrong

www.butsch.ch Resolve and find OAuth problem in Exchange Hybrid Setup Environment Short Understanding OAuth: OAuth (Open Authorization) is an industry-standard protocol that enables secure authorization for third-party applications without the need to disclose user credentials. It allows users to grant limited access to their resources on one site to another site, without sharing their credentials. […]

W11 24H2 + Server 2025 Hotpatch without Reboot how to set VBS via GPO so it works

  Hotpatching is coming to Windows 11 24H2 Enterprise E3+. Users will be able to patch “Security ONLY” updates on Patch Tuesday without requiring a reboot each time. W11 Hotpatch only available for Windows Enterprise E3 or E5 (e.g. Microsoft 365 A3/A5 or Microsoft 365 F3); or a Windows 365 Enterprise subscription. Windows 11 version […]

Exchange Online SMTP Volumen Limiten für ausgehende E-Mail ab März 2025 – TERRL

Microsoft führt Limit für ausgehenden SMTP-E-Mail-Flow von Tenants ein   Back to the roots? Ein weiterer neuer Grund wieso grössere Firmen gewisse Services zurück on-premise holen? Microsoft beschränkt künftig die Anzahl an E-Mails, die ein Tenant pro Tag versenden kann. Dabei ist zu beachten, dass auch Kalendereinladungen und Terminbenachrichtigungen als E-Mails gezählt werden. Falls durch […]

Exchange Tenant, EXO, EWS Security change (Fehlervermeidung Security), 02-2025

Exchange Tenant, EXO, EWS Security change (Fehlervermeidung Security) Microsoft verbessert die Sicherheit von EWS und löst das Problem bei der Kombination von “per Tenant” und “per User” Rechten. Dies erleichtert es insbesondere grossen Unternehmen, Compliance-Vorgaben konsequent durchzusetzen. Ein wesentlicher Grund für diese Änderung ist, dass viele Personen im M365-Portal oder über Graph API Änderungen vornehmen, […]

Trellix ePolicy Orchestrator 5.10.0 Service Pack 1 Update 4

Trellix ePolicy Orchestrator 5.10.0 Service Pack 1 Update 4   We have installed the latest Update 4 on several customer on-premises EPO installation and the update works fine and without any problems. Key Considerations for Updating Trellix ePO 5.10 SP1 to the Latest Rollup 4 Check your ePO database size. Some Trellix SP or Rollup […]

Microsoft EDGE fails to Update from WSUS, from MSI-file or repair APPS because of GPO, 0x80070643, 1722

Microsoft EDGE fails to Update from WSUS, from MSI-file or repair APPS because of GPO, 0x80070643, 1722 Cause: GPO / EdgeUpdate Policies In this case, we have a GPO (Group Policy) created by or for a customer who uses Firefox as the default browser because a Citrix engineer advised them that this was the best […]

Outlook.exe, delay in receive and sending E-Mail in cached mode how to solve with GPO

In the OLD KB-Number: 982697 MS explains….. The default Behavior for downloading shared folders can be modified using Group Policy and registry settings. Some of these policies and registry values may have improved the performance of shared folders in earlier versions of Outlook or when the shared folders were located in Exchange Server on-premises mailboxes. […]

MS SRV Disable IPv6 the correct way CVE-2024-38063

Recommendation 16.08.2024 for CVE-2024-38063 and IPV6 There is a patch from 2008-2022+ Servers so use it See following LINK on how to import the older OS patches into WSUS CVE-2024-38063, CVSS 9.8, import free 2008/R2 + 2012R2 into WSUS – www.butsch.ch https://www.butsch.ch/post/cve-2024-38063-cvss-9-8-how-to-import-the-free-2008-2008r2-patch-into-wsus/ If you can’t patch then as least options CAREFULLY consider disabling IPV6 the […]