Microsoft Exchange Hybrid in Just 30mins

[@chivosays]

You are making a difference in people lives. Thank you

[@AndyMaloneMVP]

Thanks so much I'm trying 🙂

[@jasonchen5876]

Thanks for the kind words, I'm always happy to help! Let know if you'd like any videos on specific topics in the future. I wish you all the

[@AndyMaloneMVP]

Thank you Jason most kindly I appreciate it.

[@claytonc82]

An oldie but a goodie, I was having trouble with a Hybrid setup giving errors, popped over to your site and found exactly what I needed. Great content as always Andy! Thank you, The Channel is fantastic and never dissapoints.

[@AndyMaloneMVP]

You're welcome!

[@EduardFilimonov-n8g]

Thank you Andy for your great video. Now I am much closer to understanding of how the hybrid works.

[@AndyMaloneMVP]

Awesome thanks 👍

[@LhenTrickz]

Your videos are amazing. Very informative and easy to understand. Keep on doing videos like this please. Great help for starter like me.

[@AndyMaloneMVP]

You’re very welcome and thanks for your kind comment. All the best, Andy

[@Timmy-Hi5]

2:25min > hahha enjoy the channel ..nice one :) :) :) like always the best of best Andy is the MVPMan

[@AndyMaloneMVP]

Thanks Tim 👍😊

[@stevek6418]

Great Video! Quick question. We have currently implemented a hybrid exchange setup but I am unsure the best place to make updates to current users mailboxes. I have a user whos main mailbox has been migrated to M365 but he has additional SMTP mailboxes linked to his account. Would I remove these mailboxes in our on-prem Exchange admin center? Or within M365 admin portal? Thanks!!

[@AndyMaloneMVP]

On premises

[@stevek6418]

@@AndyMaloneMVP Thank you for the quick reply.

[@fiqri5549]

Hi, i had the same error as at 31:22, no migration endpoint could be reached. i cannot migrate my mailbox to cloud, how to solve?

[@AndyMaloneMVP]

Check your DNS records

[@fiqri5549]

@@AndyMaloneMVP which dns record should i add to the dns hosting?

[@vincentreilly6562]

Hi! Great video. Can you explain how you are meant to verify your domain in O365 (mx records, txt etc) if the domain is being used to point toward an on premises exchange/3rd party spam filter?

[@AndyMaloneMVP]

Check out my DNS video in the Microsoft Entra playlist. This will probably help you. I’ve also covered it in previous videos as well. docs.microsoft.com is the definitive guide to configuring DNS. It’s super simple to do. I’m actually due to do an updated video on this topic, so this is something I’ll add to my list soon. Thanks again.

[@emmanuelgarcia9611]

Ran into the same issue, were you able to resolved this ?

[@vincentreilly6562]

@@emmanuelgarcia9611 yeah all sorted. Migrated everything over successfully. The MX records pointed toward my spam filter and not office 365 and office 365 remain unverified which hasn’t caused any problems.

[@Aman-io9ql]

Thank you so much your videos are so helpful😀

[@AgentLumidee]

@Andy, Please share the link to the full videos where you follow the steps highlighted in this video step by step. You were mainly paraphrasing everything. Thanks

[@AndyMaloneMVP]

For step by step instructions on how to do hybrid at checkout, learn.microsoft.com

[@bejaleel]

Such an amazing video.. you are the Master..

[@AndyMaloneMVP]

Thank you so much 😀

[@daraiuskeeka8596]

Hi Andy, Great video. Thank you. I have a scenario where the client has an on-premise root domain and two subdomains. They want separate Microsoft Tenancies for each (“Root”, “Subdomain 01”, “Subdomain 02”) with Exchange full Hybrid. Is this possible?

[@AndyMaloneMVP]

Yes this would be possible however it would be quite a bit of work I would imagine. I urge you to read all the documentation on learn.microsoft.com. Good luck 👍

[@Timmy-Hi5]

Question on training for M365 migration consutant. Do you have some tips on what would be the right path, and if training exist for it at all. You could probably create virtual Academy :) :) ... I'm willing to pay any money for real.... ;) :) :)

[@AndyMaloneMVP]

docs.microsoft.com/en-us/certifications/exams/70-345

[@harpoon_bakery162]

is there a PART 2? there are a lot of things going on during the final cutover to the cloud (when the on-prem exchange boxes go dark or at least gray)....a lot has to happen -- devices that use on-prem exchange for SMTP email services (MF Copiers, Backup software for notifications, etc.) must be planned for and changed over to one of many forms of device O365 Authentication, Steps that need to be done for the DNS records (autodiscover, MX, SPF), for the ports in the firewall that were previously punched open, for Spam Filtering continuation, Rules that need to be set up in the Exchange Online management interface if you are going to use an outside Spam-Filter service (which many do), also, In the 365 admin center you have to go to "Domains" and perform steps in there to finalize and shut-off the Hybrid Mode for each domain (it also shows you what the public DNS records need to look like) so that the routing of email is no longer local (MX record previously points to the WAN IP and is port-forwarded to the local Exchange LAN IP) ....as it was routing still through on-prem exchange. ,

[@AndyMaloneMVP]

Gosh, you could almost go on the course for that! 😉

[@harpoon_bakery162]

@@AndyMaloneMVP i edited my post to make it more clear, albeit it's a bit longer now. I really appreciate your video. Hybrid is quite the journey! subscribed!

[@sleba96]

Hi, we have a cloud office 365 platform with E1 licenses, we use Teams and our Exchange mail is on-premise. We currently use onmicrosoft addresses in the cloud. We would like to implement an ad connect so that the same user password can be used to log in to both 2 interfaces and Teams history is not lost. After the hybrid setup, we set the DNS to our own domain, all UPNs matched, but still the AD connect did not pair the on-premises and cloud user. Created a completely new user in the cloud. What could be the cause of the error? Is it even possible to pair in a hybrid setup?

[@AndyMaloneMVP]

Sounds like some consulting is needed here I'm afraid. I don't think you've set things up in the correct order.

[@sleba96]

@@AndyMaloneMVP i just found that, in the test enviroment the on-prem AD user had no mail attribute, but in the cloud he had one. Can that cause the problem with the syncronization?I thought it's checking only the UPN for the sync.

[@emmanuelchrispher8958]

Thanks so much i will always be there, when u make a new video. i hope u will continue all of the time

[@AndyMaloneMVP]

I’ll do my best😊

[@JoeNewton99]

Hi Andy. Really enjoy your videos. I am looking to do a hybrid migration, but not for any of the reasons you stated; my understanding is that it is a requirement for Entra ID Connect, because mail attributes in Entra ID are copied from Active Directory, and so need to be configured on premises using a local Exchange server? If that is the case, and you don't need any other hybrid Exchange featues, would you use simple or full, and modern or classic? Thanks!

[@AndyMaloneMVP]

You might think of a straight migration rather than hybrid then

[@JoeNewton99]

@@AndyMaloneMVP my understanding was that if i did that then Entra ID connect wouldn't work properly because on prem AD has Exchange attributes which synchronise to Entra ID, so to make changes to Exchange Online mailboxes you have to edit AD attributes manually, which is risky?

[@rkvala]

Hey Andy, thanks for all the learnings, we are having Proof point where our mx and spf points, my ews resolves internally but externally. I'm not able to create endpoint using remote server from O365 to create an endpoint?

[@AndyMaloneMVP]

Assuming that you're in Hybrid. Use cost values on your DNS records to control in which order they are processed.Here is a good article for you :-) practical365.com/mx-records-for-exchange-hybrid-deployments/

[@joseovalles4060]

Hello Andy, thanks for the Video really good work. May I ask you, is any difference if I select the edge server that is on a DMZ on the wizard instead the Cas server ?… on the other hand how can I undo the Hybrid configuration ? Thanks in advance

[@AndyMaloneMVP]

I’ve not tried that. I’d take a look at the best practice guides on learn.microsoft.com

[@9huzz]

Thank you for the amazing video. But I have a small question. Is it necessary to select "Mark this key as exportable"? I couldn't find it in any Microsoft documentation. Why did I ask this question? :) Because I have a problem with migration mailboxes. I did not check this option when configuring hybrid deployment. Maybe my problem is related to the option.

[@AndyMaloneMVP]

The exportable key is always useful because you can reuse the certificate, but if you don’t export it, you can’t reuse it again. It’s just a good tip.

[@davidgitter3903]

Hi Andy, love your videos! A quick and I hope simple question. We have a small site running on-prem Exchange 2019 and we want to better secure access to OWA & EAS, using Modern Auth and/or MFA. Unless I have no other choice, I really don't want to deal with deploying ADFS in such a small environment, and they don't want to move their mailboxes to the Cloud. They want all their data to stay on-prem. Is it possible to setup a Hybrid Exchange environment, without actually moving any mailboxes, and use M365 simply as the gateway (target) for OWA & EAS connections from the Internet? Any advice would be most appreciated.

[@AndyMaloneMVP]

Absolutely you can do this 100% just follow the setup guide and enable MFA for hybrid users. They will then be MFA’d but there mail stays onprem

[@Cyber95-95]

Oh and last question :) can the hybrid configuration wizard run on any server, including the exchange server itself?

[@AndyMaloneMVP]

Yes, I believe you can.

[@Cyber95-95]

Wonderful video - few questions if that’s ok - i have an environment that already has adconnect and users synced to 365 (but with exchange online unticked in services) because this was previously conflicting, at what point can I tick to turn on exchange online on the mailbox again? I’d assume after the hybrid option is selected in ADconnect? And finally, would performing any of these steps invoke any downtime or can it be done in the background?

[@AndyMaloneMVP]

By enabling the hybrid options in AADconnect It puts place holders in place for exchange hybrid. I don’t think this will do any harm. Generally know there would be no downtime here. But before you press the button I would definitely check out docs.microsoft.com and the Microsoft tech community both of which are great sources of information here. Good luck.

[@andonisagardia7222]

Great video, thank you very much! Does this still work on Exchange 2010 env? If we have multiple Exchange servers, we just need to select one of them to be the relay from cloud to local? How can we change it later? Thanks!

[@AndyMaloneMVP]

I'm not sure but if you check the documentation at docs.microsoft.com for the latest updates :-)

[@informbiju]

federation option is missing in the latest HCW, is it intentional?

[@informbiju]

hi Andy, is the process same for Exchange DAG

[@AndyMaloneMVP]

In Microsoft online Microsoft take care of these however it’s becoming increasingly apparent the importance of having a backup so you may want to look at a backup solution like Veam. I’d also recommend Microsoft 365 back up, the only downside here is it’s a little expensive and I think you can get a similar solution much cheaper. Good luck 👍

[@default0ne268]

Hi Andy, appreciate your great videos and recommendation. I want to go this Hybrid Scenario to move over to ExchangeOnline but with a longer coexistence. I am struggling about two things: 1) Can I use one of my existing 3 Exchange Servers to be the Hybrid one connecting to O365 or do I have to setup a new one? AAD Connect is already existing on a separate machine. 2) I want to get rid of my on premise infrastructure and old Exchange servers. After having all users migrated successfully, am I able to shut down all old stuff? I've seen some blogs recommending to keep a legacy Exchange Server, but I did not get the reason for. Thank you

[@AndyMaloneMVP]

Thanks for your question, question 1, yes absolutely you can. Question 2. Again, the answer is yes, but again I would follow the recommended approach as suggested in the Microsoft docs library, which you can find at docs.microsoft.com. Thanks again

[@default0ne268]

@@AndyMaloneMVP Unfortunately my previous answer has been deleted!? Thank you for your prompt response. I've read the microsoft documentation and as well some blogs, but did not find a proper answer. To keep things short. What is exactly meant with directory synchronisation? Doesn't Azure AD Sync take over all this? I've found a blog referencing Exchange 2019 CU12 is allowing to decomission Exchange fully as there is a powershell sync service included which can be run without license and without any further Exchange resource. Can you confirm this option? If yes wouln't it be best to combine the Azure AD Sync Server with this Exchange PowerShell Sync on one machine?

[@ajmarcelino1100]

can you do a session for exchange on-prem to exchange online migration? 🙂

[@AndyMaloneMVP]

I’ll see what I can do

[@Fff-mx3uz]

@@AndyMaloneMVP it would be great🙂

[@philguthrie6763]

does any one have a list of what does not migrate from on-prem 2016 to EXO using remote migration(hybrid). example exchange rules, accepted domains etc...

[@MOTORS_n_ROADS]

Hi Sir,, I have a query, if you can share your suggestion on that please,,, There is a Hybrid Email infra running with Exchange Server 2016 and Exchange online,,, all emailing (inbound & outbound) occurs through Exchange on-premises only, there is no role of Exchange online, neither any mailbox is migrated to Exchange online,,,,, What I want is,, there should be no information (email logs) going into Exchange online from Exchange on-premises, in short, is there a way I can revoke Exchange Hybrid, but keep MS Teams running with all features like calendar sharing, free/busy, status sync, etc. ?

[@AndyMaloneMVP]

These settings are controlled by the migration settings within Microsoft teams admin Centre. However, if you’ve already migrated to the full teams client, this may not be possible. I suggest that you get some support on this topic area by either contacting support.microsoft.com or visiting the Microsoft tech community. I’m sorry I couldn’t help with this.

[@skyguy7868]

Hi Andy, just a quick question, in an On-prem Exchange having DAG configuration, should we need some extra precautions during Hybrid Migration?

[@AndyMaloneMVP]

No need as the new server will take the role of a CAS server. If you are in hybrid. Exchange just sees Exchange Online as another server.

[@santoshchoudhary120]

Amazing session!

[@jazzpabla2398]

Great video thanks for the break down on Hybrid Exchange. (Question) If you perform any of these steps incorrectly can bring down you're on-premise Exchange environment? Also does Microsoft have a step by step guide on how to setup and perform a Hybrid migration?

[@AndyMaloneMVP]

Indeed the link in the wizard send you to the latest how to page on docs.Microsoft.com I would also check out the Microsoft tech community

[@patrickwalker2455]

Excellent Video. Would you consider doing a video specifically on performing an Exchange Hybrid Health Check?

[@rachidelassal5762]

Hi Andy and thank you for this very helpful video, I finished the Hybrid configuration and I migrated a test mailbox and assigned a licence, But the mailbox remains empty knowing that I have more than 1700 Email in my on-premises mailbox Can-you help on this please thank you in advance

[@AndyMaloneMVP]

I’d post the question to the Microsoft Tech community or go to docs.Microsoft.com That’s the quickest way to solve your problem 😊

[@rachidelassal5762]

@@AndyMaloneMVP Ok, thank you very much 😀

[@juliocesarpernia4877]

Hi Andy, I'm trying to HCW a tenant that already has o365 (non-hybrid) from a sister company, in which we want to set up our hybrid environment without affecting the other o365 from the sister company, when I do the HCW setup and i get to the agent installation part i get an error that says: Step=InstallConnector, Thread=6] FINISH Time=77.0s Results=Failed Setup ended with exit code 1603. have you had this problem? how can I solve that? regards

[@AndyMaloneMVP]

Gosh I’m sorry but I’m not a help desk. In my experience problems like this could be one of the following DNS, a licence issue, and uninstall / reinstall the agent. I’d try the Microsoft Texh Community m. Good luck 👍😊

[@juliocesarpernia4877]

@@AndyMaloneMVP thanks andy sorry for such a long question hehehe, it was just a moment of desperation, but great video 😅✌

[@AndyMaloneMVP]

@@juliocesarpernia4877 No worries and the best of luck 👍😊

[@Mason-yf8zt]

I have a client who is running Exchange2016 with AzureAD Connect for logging into Teams, Sharepoint and 365 Apps. They now want O365 Email so I'd like to migrate them and shut down the exchange server while keeping AD Sync. There's not much info on this specific scenario that I can find as the Minimal hybrid setup says it's designed if you don't want to keep AD Sync after.... and going Hybrid means you'll be managing O365 in your on-prem Exchange server which we don't want. I'd just like someone who knows a thing or two to confirm that Exchange on prem MUST hang around or there's a path to getting rid of it. Even just shutting down without uninstalling. I realize there is a way to decommission Exchange server but it requires 2019 and they're running 2016. Also, I think this might be an O365 Admin nightmare you could add to a list. Don't set up ADConnect syncing in an exchange environment. Migrate first, then set up password syncing.

[@AndyMaloneMVP]

There are well developed plans for migrating to 365. Learn.microsoft.com is your place to learn and for all the support documentation. I also recommend the microsoft tech community. It's a great source.

[@Mason-yf8zt]

@@AndyMaloneMVP Thanks. I have gone through all the docs there and they don't cover this specific scenario. It's looking like the only option is Hybrid which I was hoping to avoid since we want to shut down the Exchange server.

[@DMBTravels2023]

Hi Sir - how do we delete proxy address seen in Azure AD but in On prem account already delete that certain smtp in all attributes. Thanks Andy hybrid Setup.

[@AndyMaloneMVP]

Useful resources www.easy365manager.com/proxyaddresses/ and here charbelnemnom.com/remove-the-smtp-proxy-address-in-azure-ad/ and here stackoverflow.com/questions/65198916/remove-old-proxyaddress-entry-for-user-in-azure-active-directory best of luck

[@vishalbhatia3277]

Tro to stamp the same attributes to what you can see in Azure AD with respect to your local AD. Sync them and leave for some time to replicate those changes. Then remove it from the local AD again. Sync and wait. It should work for you.

[@vjhyuyt526]

Thanks for the advice

[@AndyMaloneMVP]

You’re very welcome

[@radekw-gh6ln]

I'm new admin in company. Previous admin didn't live me any documentation so I don't now which config he chosed (full or minimal). Is it possible to look up somewhere what he choosed?

[@AndyMaloneMVP]

Sorry m not sure what you’re asking me about here. I do wish you good luck though. Learn as much as you can 🙂👍

[@cuteandmischievous4476]

Hi Andy sir, I have multiple ad forest being synced to the same tenant using an Aad connect. Can we utilise sync rules to disable password sync from AAD to on prem for a certain OU/AD?

[@AndyMaloneMVP]

Gosh that’s a very specific question and too be honest that comes under the realms of consultancy. Off the top of my there are lots of things to think about. Back to AD, so you’re talking write back! I guess you could but with multiple Forrest’s I think you’re best talking with Microsoft support for this. Sorry.

[@cuteandmischievous4476]

@@AndyMaloneMVP thank you sir 👍👍

[@oliverhuppe2415]

@@cuteandmischievous4476 I dont think so because the rules editor is for attributes. The hashsync is not an attribute. What is your Goal? Maybe there is anorher option.

[@AndyMaloneMVP]

@@oliverhuppe2415 you are right. I don’t think there is a way to disable the password hash attribute as it’s baked in.What do you think then Oliver? What would you do?

[@clumsywob]

Hi Andy, do you know what happens to mailboxes that have been placed in an in-place hold on-prem? MS Documentation states that the data is preserved and the in-place hold rule shows in 365 but shows that it's synced to the on-prem server, however it's empty.

[@AndyMaloneMVP]

On Orem on hold is different to on Orem in 365. You need write back enabled in cloud. Premium licence.

[@philp7844]

Hi Andy, a few years back I decommissioned our single Hybrid Exchange server as the company decided to go full Exchange Online. After uninstalling the Exchange on the on-prem server i found users had lost their secondary/alias email addresses. This is because the Exchange uninstall process also removes the smtp AD user attributes which in turn then sync's to AAD/EOL. Any idea how do you go about uninstalling/removing the hybrid Exchange server without impacting ad user email attributes?

[@AndyMaloneMVP]

Hi Phil typically I would follow the guide here docs.microsoft.com/en-us/exchange/decommission-on-premises-exchange and in addition I look at this community.spiceworks.com/topic/2319594-hybrid-adsyncing-after-exchange-uninstall

[@mdaslamknl]

Excellent Thank You

[@BRALVisuals]

thank you sir

[@vishalbhatia3277]

Hey Andy, its great to see your videos always. Learning every time new things. I have a small ask. I am also getting the same error as what you are getting within the Last page of HCW. I am not sure if something is wrong however mail flow is not working. Could you please make a video on the same like what to configure in on-premises like external URLs/Internal URLs along with the records like autodiscover and how we should point them.

[@AndyMaloneMVP]

I’ll add it too my list. The error was a timing thing. You just re run the wizard and it works. You need all dns records in MX, CNAME & SPF

[@gtnetvarjao7352]

Agreed

[@ramgopalrathore2544]

tanks for the video like. y relly love soft and hope make a leaving off tNice tutorials sonn

[@AndyMaloneMVP]

Thanks so much. Making a living! No, I’m not making a living out of them yet. I’ve a long way to go before then. I still have to work like the rest of us👍😊 Thanks for your nice comments