Groupware Service: Temporary deactivation of the “Online Archive” function

From 29.08.2022 for mailboxes with a size over 10 GB

2023/04/25

+++ Update from 21/04/2023: The temporary deactivation of the “Online Archive” function has ended. +++ +++ Update from 06/09/2022: A security setting on the part of Microsoft leads to the temporary deactivation of the “Online Archive” feature and to a permanent update of the logon protocol to NTLMv2. This can lead to problems with the Outlook logon for some users. +++ The “Online Archive” feature in Outlook must be temporarily deactivated from 29.08.2022 due to a necessary security setting on the part of Microsoft. This applies to service groupware customers whose mailboxes have a special capacity of more than 10 GB.

In the groupware service, a so-called “Online Archive” is created for people who have a particularly large storage requirement (more than 10 GB). This is an additional mailbox into which old e-mails are automatically moved on a regular basis. This automatic moving must be temporarily deactivated as of 29.08.2022.

The reason for this is an important security setting which, according to Microsoft, must be set, but which currently means that moving to the online archive no longer works.

Microsoft is working on this problem. Unfortunately, there is currently no word on when the function can be reactivated.

Until a final solution is found by Microsoft, we ask for your understanding that we have to make this security setting to protect our users' data. Rest assured, however, that none of your e-mails will be lost.

Addition from 06.09.2022:

With the new security setting, a new logon protocol NTLMv2 was also activated. The outdated NTLMv1 is insecure and should no longer be used. However, this means that some users can no longer log on to the groupware service in Outlook for Windows. The login window reappears immediately after logging in or a disconnected connection is displayed. This is very likely to be the case if the problem occurred for the first time when you activated the new security setting on 29 August 2022.

Users should ideally contact their administrator or, in the case of using a computer managed by the HRZ, the

Note for admins:

In this case, please check the registry entry LmCompatibilityLevel in the key HKLM\System\CurrentControlSet\Control\Lsa, it should not exist or contain at least the value “3”. To check with the command: reg.exe query HKLM\System\CurrentControlSet\Control\Lsa /v LmCompatibilityLevel

Further information can be found on the Microsoft pages for activating the “Extended Protection” or the instruction pages of the groupware service Set up mailbox in Outlook.

Further information

More detailed information and background information on this security update can also be found on the Microsoft website:

August 2022 Exchange Server Security Updates

Exchange Server Support for Windows Extended Protection