RE: [Exchange] RE: Redirect vs. auto-forwarding rules

2016-12-02 Thread Maglinger, Paul
I put this out on the Microsoft Forum and David Wang came up with this: Apply rule to messages when the “X-MS-Exchange-Inbox-Rules-Loop” matches usern...@contoso.com send “Block” to sender with “5.7.1” This seems to work with a test user on both auto-forward and

[Exchange] [NTSysADM] Odd .ps1 files.

2016-12-02 Thread Kennedy, Jim
Seeing these from time to time from my SIEM. Not a lot but fairly consistently. C:\Users\\AppData\Local\Temp\1hv3rbtn.tyz.ps1 These are regular students that can't even run powershell. Always a generated string for the file name. This is a pretty tight environment, the students don't even

[Exchange] RE: [NTSysADM] Odd .ps1 files.

2016-12-02 Thread Kennedy, Jim
Sorry, wrong forum. -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim Sent: Friday, December 2, 2016 2:23 PM To: ntsysadm; exchange@lists.myitforum.com Subject: [Exchange] [NTSysADM] Odd .ps1 files. Seeing these