Outlook mobile end of support for iOS 9

Outlook for iOS
Apple iOS 11

Due to the rapid changes of mobile device OS and Office 365 specifications, Microsoft release a communication to inform us to update your Apple devices to a new iOS version to have a better Outlook for iOS compatibility:

With the release of iOS 11, we want to remind you that Outlook for iOS is supported only in the last two releases of iOS. This means new app updates to Outlook will now only be supported on devices with iOS 10 or iOS 11.
How does this affect me?
You are receiving this message because our reporting indicates one or more users in your organization are using Outlook for iOS on iOS 9.

Devices with iOS 9 are no longer be supported. While older versions of Outlook will still work on devices running iOS 9, these devices will not get new app updates after build 2.48. Users can expect a degraded experience of the Outlook for iOS app over time, if they do not stay up-to-date.
What do I need to do to prepare for this change?
We encourage you to stay up-to-date to maintain the best Office 365 experience.

Rif.: https://products.office.com/en-us/office-system-requirements#Mobile-devices-section

Certification Authority Enhanced RPC security

Certification Authority 2012/2012R2 and XP clients

Some Customers still have Windows XP though it is in End of Support since 8 April 2014. I found one of this *#$%ยง clients where I have an 802.1x implementation with an Enterprise Certification Authority with Windows Server 2012 R2.

Why I detailed my configuration? Because Windows 2012 and newer raised RPC security settings even on PKI CA and this cause failing certificate requests on Windows XP/Windows Server 2003.
When trying to issue certificate on Windows XP I got the error “The certificate request failed. The permissions on this certification authority do not allow the current user to enroll for certificates. ”

At first glance it has to be Permissions issue but when I verify them on CA and on the template level they are ok. If we go to the “Failed Request” container on CA we cannot see any request which has been denied by the CA. This is because the request is never delivered to the server.

So how to let Windows XP enroll certificates from Windows 2012/2012R2 Certification Authority?

  1. Upgrade Windows clients to higher OS as XP is not supported anymore
  2. Disable Enhanced RPC security for certificate requests

In my case, the first option wasn’t viable.

Read More