Assess Remediate Enable Migrate

Size: px

Start display at page:

Download "Assess Remediate Enable Migrate"

Berenice Randall
6 years ago
Views:

5 Assess Remediate Enable Migrate

6 Assess Remediate Enable Migrate Infrastructure Desktop Identity Messaging Integration Infrastructure Desktop AD Messaging Optimization Service Provisioning Messaging Integration Migrate content

7 Assess Remediate Enable Migrate

9 Separate credential from onpremises credential Authentication occurs via cloud directory service Password policy is stored in Office 365 Does not require on-premises server deployment Same credential as on-premises credential Authentication occurs via onpremises directory service Password policy is stored onpremises Requires on-premises DirSync server Requires on-premises ADFS server

10 Scenario Cloud Identity Cloud Identity + DirSync Federated Identity Smaller organizations with or without onpremises Active Directory Medium to Large organizations with Active Directory on-premises Large enterprise organizations with Active Directory on-premises Does not require on-premises server deployment Source of Authority is on-premises Enables coexistence Single Sign-On experience Source of Authority is on-premises Benefits 2 Factor Authentication options Enables coexistence Limitations No Single Sign-On No 2 Factor Authentication options Two sets of credentials to manage Different password policies No Single Sign-On No 2 Factor Authentication options Two sets of credentials to manage Different password policies Requires on-premises ADFS server deployment in high availability scenario Requires on-premises DirSync server deployment Requires on-premises DirSync server deployment

11 Microsoft Online Portal Active Directory tools Exchange Management Tools Identity management solutions Microsoft Online Services Module for Windows PowerShell Remote PowerShell

12 12

13 Assess Remediate Enable Migrate

15 Access Remediate Enable Migrate

17 Access Remediate Enable Migrate

18 Hybrid Simple Migrations IMAP migration Cutover migration Staged migration 2010 Hybrid 2013 Hybrid IMAP Migration Supports wide range of platforms only (no calendar, contacts, or tasks) Cutover Exchange Migration (CEM) Good for fast, cutover migrations No migration tool or computer required on-premises Staged Exchange Migration (SEM) No migration tool or computer required on-premises Requires Directory Synchronization with on-premises AD Hybrid Deployment Manage users on-premises and online Enables cross-premises calendaring, smooth migration, and easy off-boarding Exchange 5.5 Exchange 2000 Exchange 2003 Exchange 2007 Exchange 2010 Exchange 2013 Notes/Domino GroupWise Other 18

19 Large Medium Small Simple Rich DirSync Manual/Bulk Provisioning Automatic Provisioning Exchange IMAP Lotus Notes Google 19 Microsoft Confidential On-Premise Single Sign-On On-Cloud 19

20 In EAC, select recipients migration Start migration wizard Choose migration type and follow prompts

21 Set of Migration Cmdlets New-MigrationBatch Start-MigrationBatch Get-MigrationBatch Get-MigrationStatus Complete-Migration Test-MigrationServerAvailability

23 Works with a large number of source mail systems Works with on-premises or hosted systems Users can be migrated in batches On-premises migration tool is not required

24 On-premises migration tool is not required Access to IMAP ports (TCP/143/993) Users + mailboxes must be provisioned in advance Bulk provisioning, CSV parser, manual, etc. SMTP domains configured in O365 tenant Gather user credentials or setup admin credentials Prepare a CSV file with list of users Address, UserName, Password Max of 50,000 rows Max 10 MB in size

25 Migrated Mail messages (Inbox and other folders) Maximum of 500,000 items Possible to exclude specific folders from migration (e.g. Deleted Items, Junk E- Mail) Not Migrated Contacts, Calendars, Tasks, etc. Excluded folders Folders with a forward slash ( / ) in the folder name Messages larger than 35 MB 25

26 Provision users + mailboxes in O365 (license assigned) Gather IMAP creds and prepare CSV Wizard: Enter server settings and upload CSV Initial sync Delta sync every 24 hours Change MX record Mark migration as complete Final sync and cleanup 26

28 Simple and quick migration solution High-fidelity all mailbox content is migrated Designed for small and medium organizations Users are provisioned automatically during migration Works with Exchange 2003 and newer Identity management in the cloud (at least initially) On-premises migration tool is not required

29 Up to 1000 mailboxes in source system Outlook Anywhere service on source system (must have SSL certificate issued by a public CA) Migration Account with Full Access or Receive-As permissions to all mailboxes that will be migrated Directory Sync tool disabled in O365 tenant SMTP domains configured in O365 tenant

30 On-premises Exchange Org Office 365 Users, Groups, Contacts via Outlook Anywhere (NSPI) Exchange 2003 or later Mailbox Data via Outlook Anywhere (RPC over HTTP) 30

32 Migrated Mail messages and folders Rules and categories Calendar (normal, recurring) Out-of-Office settings Contacts Tasks Delegates and folder perms Outlook settings (e.g. favorites) Not Migrated Security Groups, DDLs System mailboxes Dumpster Send-As Permissions Messages larger than 35 MB 32

33 Partial migrations are not possible (folder exclusion, time range) Mailboxes enabled for Unified Messaging cannot be migrated Existing cached-mode files (OST files) cannot be preserved

34 Admin needs to distribute new passwords to users Users create their new Outlook profile using O365 username and new passwords (Autodiscover) All mail is downloaded from the Office 365 mailbox (i.e. the OST file must be recreated)

35 Configure Outlook Anywhere Test using ExRCA Assign migration perms Wizard: Enter server settings and admin creds Migration tool provisions users mailboxes DLs contacts in O365 Initial sync Delta sync every 24 hours Change MX record Mark migration as complete Final sync and cleanup License users

37 Simple and flexible migration solution High-fidelity all mailbox content is migrated Designed for medium and large organizations Users are provisioned with Directory Sync in advance No limit on the number of mailboxes Users can be migrated in batches (1000 per batch) Works with Exch 2003/2007 only Identity management on-premises

38 Outlook Anywhere service on source system (must have SSL certificate issued by a public CA) Migration Account with Full Access or Receive-As permissions to all mailboxes that will be migrated Directory Sync tool enabled in O365 tenant SMTP domain(s) configured in O365 tenant Does not work with Exchange 2010

39 On-premises Exchange Org Office 365 Directory Synchronization App Users, Groups, Contacts via DirSync Office 365 Mailbox Data via Outlook Anywhere (RPC over HTTP) Exchange 2003 or

41 CSV format Address, Password, ForceChangePassword One user per line Max of 1000 users in each CSV Smart-check against the Office 365 directory

42 Migrated Mail messages and folders Rules and categories Calendar (normal, recurring) Out-of-Office settings Contacts Tasks Delegates and folder perms Outlook settings (e.g. favorites) Not Migrated Security Groups, DDLs System mailboxes Dumpster Send-As Permissions Messages larger than 35 MB

43 Partial migrations are not possible (folder exclusion, time range) Mailboxes enabled for Unified Messaging cannot be migrated Existing cached-mode files (OST files) cannot be preserved

44 Admin needs to distribute new passwords to users Users create their new Outlook profile using O365 username and new passwords (Autodiscover) All mail is downloaded from the Office 365 mailbox (i.e. the OST file must be recreated)

Delta sync every 24 hours Change MX record

45 Configure Outlook Anywhere Test using ExRCA Assign migration perms Configure Directory Sync Wizard: Enter server settings and admin creds Initial sync Delta sync every 24 hours Change MX record Mark migration as complete Final sync and cleanup License users

46 46

47 Federation Trust Integrated Admin Experience Native Mailbox Move Secure Mail Flow Delegated authentication for on-premises/cloud web services Enables Free/Busy, calendar sharing, message tracking, online archive, and more Manage all of your Exchange functions, whether cloud or onpremises from the same place - Exchange Administration Center (EAC) Online mailbox moves Preserve the Outlook profile and offline file (OST) Leverages the Mailbox Replication Service (MRS) Authenticated and encrypted mail flow Preserves the internal Exchange messages headers Support for compliance mail flow scenarios (central transport) 47

48 On-premises Exchange Org Office 365 Directory Synchronization App Users, Groups, Contacts via DirSync Office 365 Secure Mail Flow Sharing (free/busy, MailTips, archive, etc.) Existing Exchange 2007 or later Exchange 2013 CAS and MBX Mailbox Data via MRS 48

49 1 2 E2010 or 2007 Hub SP/RU E2010 or 2007 MBX E2010 or 2007 CAS Clients autodiscover.contoso.com mail.contoso.com E2013 CAS Internet facing site 5 E2013 MBX E2010 EDGE Office 365 Autodiscover & EWS SMTP 4 Exchange 2010 or 2007 Servers SP/RU Intranet site 1. Prepare Install Exchange SP and/or updates across the ORG Prepare AD with E2013 schema 2. Deploy Exchange 2013 servers Install both E2013 MBX and CAS servers Install E2010 EDGE servers Set an ExternalUrl for the Exchange Web Services vdir 3. Obtain and Deploy Certificates Obtain and deploy certificates on E2013 MBX and CAS servers & E2010 EDGE servers 4. Publish protocols externally Create public DNS A records for the EWS and SMTP endpoints Validate using Remote Connectivity Analyzer 5. Switch autodiscover namespace to E2013 CAS Change the public autodiscover DNS record to resolve to E2013 CAS 6. Run the Hybrid Configuration Wizard

50 1 2 E2010 or 2007 Hub SP/RU E2010 or 2007 MBX E2010 or 2007 CAS Clients autodiscover.contoso.com mail.contoso.com E2013 CAS Internet facing site 5 E2013 MBX E2010 EDGE Office 365 Autodiscover & EWS SMTP 4 Exchange 2010 or 2007 Servers SP/RU Intranet site 1. Prepare Install Exchange SP and/or updates across the ORG Prepare AD with E2013 schema 2. Deploy Exchange 2013 servers Install both E2013 MBX and CAS servers Install E2010 EDGE servers Set an ExternalUrl for the Exchange Web Services vdir 3. Obtain and Deploy Certificates Obtain and deploy certificates on E2013 MBX and CAS servers & E2010 EDGE servers 4. Publish protocols externally Create public DNS A records for the EWS and SMTP endpoints Validate using Remote Connectivity Analyzer 5. Switch autodiscover namespace to E2013 CAS Change the public autodiscover DNS record to resolve to E2013 CAS 6. Run the Hybrid Configuration Wizard 7. Move mailboxes

Migrate All Mailboxes to the Cloud with a Cutover Exchange

Page 1 of 8 Migrate All Mailboxes to the Cloud with a Cutover Exchange Migration Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises Topic Last Modified: 2011-08-29