Remote server returned ‘550 5.7.520 Access denied, Your organization does not allow external forwarding. Please contact your administrator for further assistance. AS(7555)’

Wanneer een gebruiker probeert om e-mail doorsturen buiten de Microsoft 365 tenant aan te zetten of als de beheer probeert om een gedeeld postvak buiten de Microsoft 365 tenant te laten doorsturen dan krijgen de personen die naar de postvakken een e-mail sturen de volgende foutmelding te zien:

Remote server returned ‘550 5.7.520 Access denied, Your organization does not allow external forwarding. Please contact your administrator for further assistance. AS(7555)’

Dit is op te lossen door een uitgaande spamfilterbeleid aan te maken.

  1. Log in als beheerder binnen de Microsoft 365 tenant.
  2. Ga naar Microsoft Defender:
    https://security.microsoft.com
  3. Ga aan de linkerzijde naar E-mail en samenwerking -> Beleid en regels -> Bedreigingsbeleid -> Anti-spam.
  4. Klik op Beleid maken -> Outbound
  5. Vul een naam in zoals Allow forwarding from mike@ en een beschrijving zoals Forwarding from mike@source.nl to mike@destination.nl en klik op Volgende.
  6. Kies de gebruiker, bijvoorbeeld mike@source.nl en ik op Volgende.
  7. Zet Regels voor automatisch doorsturen op Aan – Doorsturen is ingeschakeld en klik op Volgende.
  8. Klik op Maken.
  9. Klik op Gereed.
  10. Controlleer dat Status op Aan staat.

Vragen?

Neem dan contact met ons op.

The command you tried to run isn’t currently allowed in your organization. To run this command, you first need to run the command: Enable-OrganizationCustomization

When trying to add an anti-spam policy in O365 Security Portal the following message occurs:

All the customers where we already added anti-spam policies without this message used Azure AD Connect, I think this activates the OrganizationCustomization option.

On Windows 10 of Windows 11, open elevated Powershell:

Install-Module -Name ExchangeOnlineManagement

Import-Module ExchangeOnlineManagement

Connect-ExchangeOnline -UserPrincipalName user@domain.tld

Enable-OrganizationCustomization

Just one extra step there for those who do not use PowerShell, after InstallModule, run this: Set-ExecutionPolicy RemoteSigned

Gareth

“Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.”

When trying to install Symantec Endpoint Security the following error may show up:
“Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.”

The first step would be to reboot, but sometimes this is not possible because of important system services, or after a reboot the error still shows.
Please try the following:

  1. Open the Windows Registry using regedit.exe.
  2. Search for the entry “PendingFileRenameOperations” in:
    • HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession Manager
  3. Restart the SEP installation; the install should finish without error.

Another service operation is currently in progress

When trying to install Symantec Endpoint Protection the following error may popup:
“Aanother service operation is currently in progress”

Try a reboot first, if not possible or problem still exists, try the following:

  1. Open Windows Registry Editor. Click Start > Run, type regedit, and click OK.
  2. Back up the registry.
    Note: For Windows Registry backup and restore instructions, see How to back up and restore the registry in Windows.
  3. In the left pane, navigate to the following key:
    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstaller.
  4. In the left pane, right-click on the Inprogress key, and click Delete.
  5. Click Yes to permanently delete the entire Inprogress key and all of its subkeys.

Source: https://support.symantec.com/en_US/article.TECH218138.html

Moving directory to another partition (part 1)

Due to the fact that the primaire virtual disk (containing the Debian OS and currently the /var) of one of our customers servers is on a SSD pool and almost reaching its capacity (>75%) we need to add a second virtual disk and move the /var folder (HDD space costs less and is fast enough to serve websites and email).

First we started with creating the new virtual disk and adding it to the VM.
Secondly we partitioned it:
1. Use “fdisk -l” to get the disk name (in our case vdb)
2. cfdisk /dev/<diskname>
3. Select new
4. Press enter at the “Specify size in MB” to use the whole disk.
5. “mkfs.ext4 /dev/<diskname>”
6. “mkdir /var2”
7. Get the UUID of the disk with the command “blkid”.
8. “echo “UUID=<UUID> /var2 ext4 errors=remount-ro 0 1″ >> /etc/fstab”

Next we can copy the data from /var to /var2 (we use rsync to preserve permissions).
We are currently running the following command to make a first copy:
“rsync -av /var/ /var2”

The next step would be stopping all services (apache, mysql, dovecot etc.) but we will continue on this after the data has been copied (which will take a full night).