exchange online Archives - Apostolidis Cloud Corner

How to disconnect a mailbox & re-assign it to new user in a Hybrid Scenario

Pantelis Apostolidis — Wed, 21 Jun 2017 10:32:34 +0000

How to disconnect a mailbox & re-assign it to new user in a Hybrid Scenario

Scenario objectives: We have an Exchange Hybrid setup between on-premises and Exchange Online (Office 365). All users are synced and the mailbox is located at Exchange Online.

We need to separate an existing mailbox from its user account and re-connect this mailbox to a new user account. If the mailbox in this scenario was located at the on-premises Exchange it would be an easy process just using the Exchange Management Console. But in a Hybrid scenario, the process includes many steps since the mailbox is not directory conencted to the Active Directory user account but it is conected to the Azure AD Synced User Account.

For the ease of the guide we will name the Existing User Account: OLDUSER and the New User Account: NEWUSER.

We will disconnect the Exchange Online Mailbox from the OLDUSER and connect it to the NEWUSER.

Step 1.

At the on-premises Active Directory, at an OU that is not synced with Azure AD, create the new user account. The “NEWUSER”. Ensure that you do not enter nothing at the email field. Just a user account with no email attributes.

Step 2.

Move the “OLDUSER” to an OU that is not synced with Azure AD

Step 3.

Run a Delta Sync. Go to the server that the AD Connect is installed, open the PowerShell and run “Start-ADSyncSyncCycle”

Step 4.

We need to get the GUID of the NEWUSER. To do so login to a Domain Controller, open PowerShell and run:

[system.convert]::ToBase64String((Get-Aduser NEWUSER).objectGUid.ToByteArray())

Copy the GUID to a Notepad

Step 5.

Open the Office 365 Admin Center and Restore the deleted user “OLDUSER”

Go to Users –> Deleted Users –> Select the user “OLDUSER” –>Click Restore

Step 6.

Connect to Azure AD and set the GUID of the “NEWUSER” to the Office 365 “OLD USER”. Details for connecting to Azure AD “https://technet.microsoft.com/en-us/library/dn975125.aspx“

Connect-MsolService

Set-MsolUser -UserPrincipalName olduser@mydomain.com -ImmutableId vMZGJpW6CUGY09bduJ5dlw==

Step 5.

Open the Office 365 Admin Center and Delete the old user “OLDUSER”

Go to Users –> Active users –> Select the “OLDUSER” –> click Delete user

Step 6.

Clean the on-premises Active Directory account of the old user “OLDUSER” from all attributes that will be added to the new user, like Proxy addresses, Target, address, Alias name, nickname etc.

Step 7.

Make the “NEWUSER” user account a Remote Mailbox object

At the on-premises Exchange, open the Exchange Management Shell and run:

Enable-RemoteMailbox -Identity NEWUSER -DisplayName "NEW USER" -RemoteRoutingAddress newuser@mydomain.onmicrosoft.com -Alias newuser -PrimarySmtpAddress newuser@mydomain.com

Step 8.

Move the “NEWUSER” to an OU that is Synced with Azure AD and run a Delta Sync like Step 3.

After that the “NEWUSER” active directory account will be connected with the “OLDUSER” Exchange Online mailbox and all attributes of the Exchange Online mailbox will be replaced with the “NEWUSER’s” values.

I suppose there are other ways, maybe easier, to accomplish this task, but following this process you will have the desired result without problems.

Pantelis Apostolidis

Pantelis Apostolidis is a Sr. Specialist, Azure at Microsoft and a former Microsoft Azure MVP. For the last 20 years, Pantelis has been involved to major cloud projects in Greece and abroad, helping companies to adopt and deploy cloud technologies, driving business value. He is entitled to a lot of Microsoft Expert Certifications, demonstrating his proven experience in delivering high quality solutions. He is an author, blogger and he is acting as a spokesperson for conferences, workshops and webinars. He is also an active member of several communities as a moderator in azureheads.gr and autoexec.gr. Follow him on Twitter @papostolidis.

www.cloudcorner.gr

The post How to disconnect a mailbox & re-assign it to new user in a Hybrid Scenario appeared first on Apostolidis Cloud Corner.

Create migration endpoint | (Cutover & Staging Migration)

Pantelis Apostolidis — Tue, 31 May 2016 19:31:11 +0000

Open the Office 365 Exchange Administration Console and go to Recipients > Migration > More > Migration endpoints and click on the plus sign to add a new endpoint.

Select the type of migration endpoint (Outlook Anywhere) and enter the details requested:

An email address that will be migrated – this is used to test mailbox access during configuration
Account with privileges – usually a Domain Administrator, but it can be another user, in which case you must assign permissions as specified here
The privileged account you specify will be used to autodiscover the connection settings and test access to the mailbox specified above.

Click next and verify that the correct details have been populated in the next dialogue box:

Now that the endpoint has been tested you just need to define values for the number of concurrent migrations and supply a descriptive name for the endpoint.

Pantelis Apostolidis

www.cloudcorner.gr

The post Create migration endpoint | (Cutover & Staging Migration) appeared first on Apostolidis Cloud Corner.

Exchange 2013 Add public certificate and enable it

Pantelis Apostolidis — Tue, 31 May 2016 19:19:07 +0000

The exchangeserverpro.com site has the below excellent articles,

to create the certificate request:

http://exchangeserverpro.com/create-ssl-certificate-request-exchange-2013/

to compete the pending request:

http://exchangeserverpro.com/exchange-2013-complete-pending-certificate-request/

and to enable it:

http://exchangeserverpro.com/exchange-2013-assign-ssl-certificate-to-services/

Pantelis Apostolidis

www.cloudcorner.gr

The post Exchange 2013 Add public certificate and enable it appeared first on Apostolidis Cloud Corner.

DirSync & Mail-Enabled Public Folders Distribution Group Members

Pantelis Apostolidis — Tue, 06 Oct 2015 14:39:35 +0000

During a latest Hybrid Migration from Exchange 2010 to Office 365, I encounter this problem. The client has Mail-Enabled Public Folders that are members of Distribution Groups. DirSync synchronizes all members of the Distribution Groups except the Mail-Enabled Public Folders. Also since the DirSync is active you cannot manually add the Mail-Enabled Public folder to the Distribution Group. The solution that worked for me is to create a Mail Contact, then using ADSIEdit or the attrributes tab, change the “TargetAddress” to the Mail-Enabled Public Folder smtp address and finally add the Mail Contact as a member to the Distribution Group.

Now, Step-by-Step:

Lets say that the Mail-Enabled PF’s name is mypublicfolder and the Email Address is mypublicfolder@mydomain.gr

Open Exchange Management Console
Go to “Receipient Configuration” / “Mail Contact” / “New Mail Contact”
Select “New Contact” and click Next
Since the we cannot add the same details as the Public Folder, enter something similar just to remember, I use the “-O365” extension like this:
Name: mypublicfolder-O365
Alias: mypublicfolder-O365
External e-mail address: mypublicfolder-O365@mydomain.gr
Click Next, New and finally Finish to create the Mail Contact
Open Active Directory Users & Computers
Go to “View” and check the “Advanced Features”
Go to the container that the new Mail Contact is located and double click to open the properties
Go to the “Attribute Editor” tab and search for the “TargetAddress”
Click Edit and change the address to the Mail-Enable Public Folders address, in this case the Target Address field should change to: SMTP:mypublicfolder@mydomain.gr
Click OK, Apply and OK to close the properties.
Now go back to the Exchange Management Console and go to “Reciepient Configuration” / “Distribution Group”
Locate the Distribution Group and add the Mail-Contact as a member.
Wait the DirSync to finish a full sync or force it and you are ok.

Pantelis Apostolidis

www.cloudcorner.gr

The post DirSync & Mail-Enabled Public Folders Distribution Group Members appeared first on Apostolidis Cloud Corner.

Add your domain to Office 365

Pantelis Apostolidis — Wed, 16 Sep 2015 08:21:34 +0000

How to add your domain to Office 365

Go to the Office 365 Portal, https://portal.office.com
Go to “Domains” and click on “Add domain”
The wizard starts at step 1 “Verify your Domain”, press “lets get started”
Type your Domain and press Next
Now the wizard will provide a txt record to verify the ownership of the domain. This record must be added to the DNS registar of your domain.
At this point we can go back to the admin portal untill the txt record is added and applied. Just press the menu button, at top left, and click the “Admin” button.
When the txt record is ready, go to the domain section of the portal, select the domain and press “Start setup”
click on “Okay, I’ve added the record” to verify the txt record and that all. After that the wizard will provide a list with all the DNS records that must be added in order to have the Office 365 fully functional. In case you are about to perform any kind of migration (cutover, staged, hybrid, imap) don’t change anything yet.

Note: this will also add the domain to the “accepted domains” of Exchange Online

Pantelis Apostolidis

www.cloudcorner.gr

The post Add your domain to Office 365 appeared first on Apostolidis Cloud Corner.

Cutover migration (bullets)

Pantelis Apostolidis — Tue, 15 Sep 2015 20:24:54 +0000

This post is a “quick note” to help on a cutover migration.
Exchange 2013, Exchange 2010, Exchange 2007 & Exchange 2003 versions are supported.

Add your domain to Office 365 & verify
This step requires access to the public DNS registar to create a txt record to verify the domain ownership.
Configure Outlook Anywhere (link)
Add public certificate and enable it for IIS & SMTP (Instructions for Exchange 2003, 2007, 2010, 2013)
Disable UM
Check Primary SMTP
The Primary SMTP address of each on-premises mailbox is used to create the email address for a new Office 365 mailbox
UPN
The UPN is used to create the username for the Office 365 user. It is convenient to change the UPN to match the Primary SMTP. This way the new user will have username@publicdomain.com for username (login). If the UPN is local then the new user will be created with username@domain.onmicrosoft.com username.
Hide not needed mailboxes
Cutover migration moves all mailboxes, mail users, mail contacts, and mail-enabled groups that are listed at the GAL. All hidden from address list are excluded.
Mail enable security groups
Create migration endpoint
Create migration batch
Start the migration batch
Change MX & Autodiscover records to point to O365
When all mailboxes are migrated to O365, change the MX & Autodiscover records to point to O365. In Exchange 2007, Exchange 2010, and Exchange 2013 you should also set Set-ClientAccessServer AutodiscoverInternalConnectionURI to Null.
Stop & Delete the migration batch
Assign licenses
Remove on-premises Exchange

A very nice article about this: Perform a cutover migration of email to Office 365

Pantelis Apostolidis

www.cloudcorner.gr

The post Cutover migration (bullets) appeared first on Apostolidis Cloud Corner.

Public Folder Sizes

Pantelis Apostolidis — Sat, 05 Sep 2015 12:57:33 +0000

A nice PowerShell command to view all public folders’ sizes

Get-PublicFolderStatistics | Sort-Object TotalItemSize -Descending | ft Name,@{label="TotalItemSize(MB)";expression={$_.TotalItemSize.Value.ToMB()}},@{label="TotalDeletedItemSize(MB)";expression={$_.TotalDeletedItemSize.Value.ToMB()}} -wrap | Out-String

Pantelis Apostolidis

www.cloudcorner.gr

The post Public Folder Sizes appeared first on Apostolidis Cloud Corner.

Set maximum email message size for outbound messages

Pantelis Apostolidis — Mon, 18 May 2015 06:55:53 +0000

To set maximum email message size for outbound messages for an individual user do the following:

#First check the current size limit:
get-mailbox "user" | select MaxSendSize
#Then set the prefered size limit:
set-mailbox "user" -MaxSendSize XXMB
#To set the size limit for all mailboxes run:
Get-Mailbox | Set-Mailbox -MaxSendSize XXMB
#To set the size limit for a list of mailboxes first create a list with the mailbox names and then run:
Import-Csv C:tempmalboxes.csv|%{Set-Mailbox -Identity $_.mailbox -MaxSendSize XXMB}

Pantelis Apostolidis

www.cloudcorner.gr

The post Set maximum email message size for outbound messages appeared first on Apostolidis Cloud Corner.

Create Distribution Groups on Exchange using EMS

Pantelis Apostolidis — Mon, 11 May 2015 12:48:28 +0000

To create a distribution group on Exchange 2010, 2013 & Exchange Online using EMS the command is:

New-DistributionGroup -Name "Name" -DisplayName "Display Name" -Alias "Alias" -PrimarySmtpAddress "EmailAddress" -Type "Security or Distribution"

To create distribution groups from a list, using a bulk command first create a csv file with the groups details. The csv must have the Display Name, the Email Address and the alias for each group. The run the below command:

import-csv C:tempgroups.csv | foreach {New-DistributionGroup -Name $_.name -DisplayName $_.displayname -Alias $_.alias -PrimarySmtpAddress $_.emailaddress -Type Security }

Set the Distribution Group to require or not Sender Authentication. If this is True then only senders for inside the Exchange Organization can send emails to the list. It this is False then everyone can send emails to the list.

Set-DistributionGroup "Display Name" -RequireSenderAuthenticationEnabled $False

Pantelis Apostolidis

www.cloudcorner.gr

The post Create Distribution Groups on Exchange using EMS appeared first on Apostolidis Cloud Corner.

Create contacts on Exchange using EMS

Pantelis Apostolidis — Mon, 11 May 2015 12:23:29 +0000

To create a contact on Exchange 2010, 2013 & Exchange Online using EMS the command is:

New-MailContact -DisplayName "Display Name" -ExternalEmailAddress "alias@domain.com" -Name "Alias"

To create contacts from a list, using a bulk command first create a csv file with th contacts. The csv must have the Display Name, the Email Address and the alias for each contact. The run the below command:

Import-Csv C:tempcontacts.csv|%{New-MailContact -Name $_.alias -DisplayName $_.DisplayName -ExternalEmailAddress $_.EmailAddress}

Pantelis Apostolidis

www.cloudcorner.gr

The post Create contacts on Exchange using EMS appeared first on Apostolidis Cloud Corner.