Azure AD Connect 1.1 Filtering – Part 1

As DirSync evolved to AAD Sync, and AAD Sync evolved to AAD Connect, there have been significant changes to the way we accomplish tasks with these tools.

With the recent release of Azure Active Directory Connect v 1.1, Microsoft has made several updates to how various aspects of the process of syncing your on-premises Active Directory accounts into Azure Active Directory. There have been some pretty significant changes in a couple of areas, with one of those being sync filtering. In this series of blogs posts, I’m going to walk you through the options and processes for filtering your sync jobs.

Read more

The Confusing Case of Cross-Forest Delegation

If you've even participated in an Exchange Online migration at almost any level, it's likely you've run into the issue of cross-forest delegation. You know that Exchange allows you to delegate rights from one mailbox to another, allowing users to access other mailboxes. When you do an Exchange hybrid migration, there are some special considerations you have to take to keep these delegated rights working. Depending on who you ask, you'll get all kinds of different answers about what works when. In this blog post I will explain the confusing case of cross-forest delegation, and what you can expect to work or not work.

Read more

Exploring Containers – Part 1

I like to think I am a fairly smart guy. More than that, I know I work with a bunch of really smart people. Given this, I found it interesting to find that pretty much no one on my team has any idea what “containers” are, what they do, or how they work. All we know for sure is that Mark Russinovich thinks they are a nifty new feature of Server 2016 and Windows Azure.

I decided it was time to figure this stuff out, so I dove into a search on Channel9. Here’s a Q&A I had with myself after I watched a few of those videos.

Read more

Deploying Office Online Server for Exchange 2016 – Part 2

Your new OOS farm can be connected to any version of Exchange from 2007 to 2016. Connecting OOS to any version of Exchange previous to Exchange 2016 just allows users to open documents from OWA within the browser. That is not a terribly compelling feature, and I don’t recall ever deploying WAC for a customer to be used for just Exchange. The few times that I have connected WAC to Exchange, it was intended to be used for Lync or SharePoint and just connected to Exchange “because it was there”.

Read more

Deploying Office Online Server for Exchange 2016 – Part 1

One of the new features of Exchange 2016 is the inclusion of “Modern Attachments”. Modern Attachments are not attachments at all, but links to Office documents that are stored within SharePoint sites but presented to look like attachments within email messages. Modern Attachments are a great step forward in that they allow users to continue to use attachments in the way they are used to while removing those files from your Exchange 2016 servers.

Read more

Update to Office 365 Lifecycle Support Policy for Office 365

This is not really a surprise. I’ve been telling customers who are in the process of moving to Office 365 that they will need to stay current with their on-premises software for years.

If your organization is moving to Office 365, you HAVE TO align your organization to the new reality that the cloud moves forward, and it’s not going to wait for you.

Read more

RBAC in Exchange Online Part 2 - Scoping admin roles

In the first article in this series, I coved the basic GUI based ways that you can use RBAC in Exchange Online to allow users to control their own contact information in Exchange Online and to allow you to designate administrators with limited sets of rights.

In this article, I’m going to show you how to really use RBAC. We’re going to dive into PowerShell and see how to do things like give an administrator rights to manage a specific sub-set of your users.

Read more

RBAC in Exchange Online - Part 1

A common request I get while doing migrations into Exchange Online is to assist customers in setting up permissions so that they can limit administrator's rights and scope to control Exchange Online. The solution for this problem is Role Based Access Control (RBAC), and it can be a little confusing to setup.

In this article I am going to start into the easier, GUI based options for setting up RBAC in Exchange Online. If you're looking for the more advanced RBAC controls, skip ahead to Part 2.

Read more