Just set registrar to use Cloudflare.

Thanks everyone

I am new to Microsoft 365 and Exchange based email in general.

I have setup hosted email via Microsoft for about 30 users with Exchange Online Plan 2.

This is for a small government entity, so we need to archive everything to comply with records retention and not allow any messages to be deleted.

I'm somewhat confused between retention policies, litigation/in-place holds and archive mailboxes.

Can someone point me in a direction of which route to take or how those things are all inter-related?

Thanks!

@manxam said in Camera for meeting room recommendations.:

We tend to use these for spaces similar in size to yours. They're about the least expensive of this type of setup but more than the $500 that you're budgeting for :
https://www.logitech.com/en-ca/product/meetup-conferencecam

I have this unit and am not super impressed with the picture quality

@gjacobse said in Archiving in Exchange Online:

One thing I would add, though not important per say-

GPO rule to prevent the creation, writing to .PST files.

They had their time.

There is no Active Directory in this setup.....just a hosted email solution.

I am new to Microsoft 365 and Exchange based email in general.

I have setup hosted email via Microsoft for about 30 users with Exchange Online Plan 2.

This is for a small government entity, so we need to archive everything to comply with records retention and not allow any messages to be deleted.

I'm somewhat confused between retention policies, litigation/in-place holds and archive mailboxes.

Can someone point me in a direction of which route to take or how those things are all inter-related?

Thanks!

@JaredBusch said in Hosted DNS questions:

@scottalanmiller said in Hosted DNS questions:

@travisdh1 said in Hosted DNS questions:

CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.

They are free.

And I have a guide on here on how to use one

Sweet.....I'll go look for it. Thanks

@travisdh1 said in Hosted DNS questions:

@wscsuperfan said in Hosted DNS questions:

I assume everyone is using the "proxy" feature of Cloudflare?

When using it, and setting CF to force SSL, do I need to do anything at my webhost with the SSL cert I already have with them? I notice that now, when proxied, the site shows the CF cert.

The end users will see the CF cert all the time.

What your local cert protects is the communication between CF and your server. CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.

Good to know

Thanks

I assume everyone is using the "proxy" feature of Cloudflare?

When using it, and setting CF to force SSL, do I need to do anything at my webhost with the SSL cert I already have with them? I notice that now, when proxied, the site shows the CF cert.

Just set registrar to use Cloudflare.

Thanks everyone

@scottalanmiller said in Hosted DNS questions:

@wscsuperfan said in Hosted DNS questions:

@scottalanmiller said in Hosted DNS questions:

@wscsuperfan said in Hosted DNS questions:

I had looked into Hurricane Electric and DNSMadeEasy, but Cloudflare seems to have a bit higher adoption and a broader feature set.

Didn't level of player in the game.

CloudFlare is the absolutely biggest dog in the game, the number one enterprise DNS/CDN player. The others aren't small, but the gap between top dog and small time players there is pretty big. CloudFlare is in competition with Amazon, not those guys.

Out of curiosity, where does Google Cloud DNS fit in?

I personally don't trust Google with any business function, not that they are a bad company, but they randomly dump products that they claim to be the hottest new thing so quickly and often that I don't even let them enter my mind as a company to do business with. I'm sure their cloud products are fast and reasonably priced, but they famously lack business support and it's just not a vendor I'd want to waste my time with as I'm only confident that any product that they offer will suddenly vanish. I was stuck once using G Suite and it was a train wreck of support and killed off features.

I'm sure it's good. But that's why I have no knowledge of it. Google doesn't have what it takes to play in the Amazon space, IMHO. They have to be worlds better than Azure, but that's not a ringing endorsement. They fall into that space of "probably pretty decent, but not quite good enough for me to care."

Pretty much, I know of no reason that I'd look beyond CloudFlare and Amazon. They offer the enterprise free option, and the high end paid options. They offer the best in class services. There's really no one else to seriously consider unless there is some unique feature that you can get elsewhere that they don't have.

Thx for the insight

@scottalanmiller said in Hosted DNS questions:

@wscsuperfan said in Hosted DNS questions:

I had looked into Hurricane Electric and DNSMadeEasy, but Cloudflare seems to have a bit higher adoption and a broader feature set.

Didn't level of player in the game.

CloudFlare is the absolutely biggest dog in the game, the number one enterprise DNS/CDN player. The others aren't small, but the gap between top dog and small time players there is pretty big. CloudFlare is in competition with Amazon, not those guys.

Out of curiosity, where does Google Cloud DNS fit in?

@travisdh1 said in Hosted DNS questions:

@wscsuperfan said in Hosted DNS questions:

@JaredBusch said in Hosted DNS questions:

@wscsuperfan said in Hosted DNS questions:

Looking at using a hosted DNS service for my domains. Looking mostly at Cloudflare (but open to suggestions).

Cloudflare is the only thing I use for DNS on my domains, and on every customer domain I have control over.

@wscsuperfan said in Hosted DNS questions:

Seems that most of these major hosted DNS providers do not provide Automatic Zone Transfer to setup secondary nameservers at another provider.

What is the need for this? Do you have a need for this level of redundancy?

@wscsuperfan said in Hosted DNS questions:

Seems hit or miss on the providers that provide DNSSEC capability.

Cloudflare supports is.

The only reason I would look for a secondary provider is in the event Cloudflare has an outage. It would then be nice to have a secondary provider.

DNS is already designed to mitigate this. It's what the TTL setting is all about. If you are really concerned that Cloudflare could have an outage, then set a long TTL, and all the other DNS servers will keep that IP address available for a long time even without Cloudflare up.

I do notice that Cloudflare supports DNSSEC, and am leaning towards them. Do you use DNSSEC on your domains?

I use DNSSEC. Mostly because I also use Cloudflare for my domains and DNS, so it's on by default. It doesn't really do much, but when it takes zero effort on my part, why not?

Thanks for the reply.

Looks like I'll use Cloudflare and enable DNSSEC as well.

I had looked into Hurricane Electric and DNSMadeEasy, but Cloudflare seems to have a bit higher adoption and a broader feature set.