Multi-Forest Migrations to Exchange Online

Over the past few years, I've migrated many mailboxes into Exchange Online. I've talked to customers with every possible set of requirements, and I've been able to accommodate most of them. Until recently, there has been one category of migration requirements that I haven't been able to accommodate: multi-forest migrations. For customers with two or more separate Active Directory (AD) forests, each with their own Exchange deployment, the supported solutions for moving to a single Office 365 tenant were very limited. They could either consolidate their on-premises AD forests into a single forest, or they could contact Microsoft Consulting Services (MCS) and develop a custom solution using Forefront Identity Manager. 

New features in Office 365 partner admin center

One great feature of Office 365 that many may not be aware of is the partner admin center. This gives Office 365 deployment partners who meet specific requirements the ability to have a connection into their customers Office 365 tenant with the customers permission. I have the ability to send a customer a link that will allow them to grant me access into their Office 365 tenant using my own Office 365 credentials, making it much easier for me to do deployment and support work for them.

Read more

PowerShell script: Activate-SyncedPasswords

In June of 2013, Microsoft released an update to the DirSync appliance that allowed it to sync passwords from an on-premises Active Directory into Azure Active Directory for use in authentication. Since then, Microsoft has also released AADSync, which is a more advance version of DirSync that allows for more complex on-premises Active Directory configurations to be connected to Azure Active Directory. Recently AADSync was updated to include the password sync feature.

Read more

Managing Distribution Lists in Hybrid Exchange Online/Office 365 Environments

Microsoft has done a great job of ensuring that hybrid Exchange Online/Office 365 tenants have almost all of the features and functionality of on-premises Exchange Server deployments, without the need for running and maintaining their own servers. However, there is still one major gap companies consistently run into as they move to a hybrid Exchange Online/Office 365 environment: distribution list (DL) management.

Read more

PowerShell script: Get-UsersPerDB

I’m working on an Exchange migration project. I did a green field Exchange 2013 deployment to migrate users to from a hosted solution. During the process I created about 3200 new mailboxes, and I must have done something wrong because those mailboxes ended up all clumped up in a couple of the databases. The problem I ran into is there is no good way to see your mailbox distribution across a number of databases in the Exchange Admin Console.

Read more

Users unable to delete public folder items after public folder migration to Exchange 2013

I recent ran across a case where a customer had recently migrated to Exchange 2013. As one of the final steps in the migration, they migrated their public folders to modern public folders on Exchange 2013. After the public folder migration was complete, the users were unable to delete or modify pre-existing public folder items even though they appeared to have the correct permissions

Read more

Making the Office 365 portal work for true single sign-on

Deploying ADFS for use with Office 365 is intended to give users a single sign-on experience. As anyone who has deployed Office 365 will tell you, you don’t really get true single sign-on. Depending on the type of client you are using, your “single sign-on” experience can vary pretty widely. The Lync and CRM online clients do give users single sign-on, but Outlook does not. Sitting in the middle you have the experience of logging into the Office 365 Portal.

Read more

Quickly Get the Data You Need for Troubleshooting Exchange Server 2013 Problems

Historically, gathering performance data when troubleshooting Microsoft Exchange Server wasn't much fun. You had to figure out what performance counters you wanted to use, then set up Performance Monitor to gather data for several days before you could do any troubleshooting. Thanks to a new diagnostic feature in Exchange Server 2013, that's no longer the case.

Read more

Changing user logon domain in Office 365

When syncing your users to your Office 365 tenant via DirSync there are a number of reason that their login ID and primary SMTP address can end up being set to @tenant.onmicrosoft.com. Maybe you started DirSync before the domain was accepted in Office 365, or maybe your users UPNs are set to something other than the domain name you want to use as their primary SMTP address. Whatever the reason, once users are synced and end up with the wrong login ID, it can be a pain to change them especially for a large number of users. One way to fix that problem is with the following PowerShell command run after you connect to Azure AD via the Azure AD module.

Read more