• Home
  • Topics
    • Office 365
    • Teams
    • SharePoint
    • Exchange 2019
    • Exchange 2016
    • Exchange 2013
    • Hybrid
    • Certificates
    • PowerShell
    • Migration
    • Security
    • Azure
  • Blog
  • Podcast
  • Webinars
  • Books
  • About
  • Subscribe
    • Facebook
    • Twitter
    • RSS
    • YouTube

Practical 365

You are here: Home / Exchange Server / How to license Exchange Hybrid servers

How to license Exchange Hybrid servers

February 11, 2019 by Steve Goodman 33 Comments

As part of your Exchange Hybrid deployment you might introduce new Exchange Servers into your organization. If you’ve planned your deployment correctly, then these will be covered by Hybrid Exchange licences included within your Office 365 Enterprise subscription.

When you don’t need a Hybrid licence

First and foremost, you must consult Microsoft or your licensing specialist for correct guidance for whether you are licensed correctly. However, there is as a key scenario where you will not need to acquire Exchange Hybrid licences.

If you are running Exchange Server 2010, 2013, 2016 or 2019 then you already have Exchange Hybrid capabilities built in to your Exchange Servers today.

Your Client Access services will be used for Autodiscover services and Exchange Web Services based communications. This includes redirecting clients to the cloud, Federated Sharing for Free/Busy and Mailbox Moves. Your Hub Transport services also have the capability built-in to manage Hybrid mail flow between Office 365 and your Exchange Server.

Adding additional servers to your organization to support Exchange Hybrid is a common piece of bad advice shared regularly. If you have a healthy Exchange 2010+ organization today, then you almost certainly have everything you need and will not need to licence Hybrid Servers.

When you do need a Hybrid licence

If you are running Exchange Server 2003 or 2007 you will need to add Exchange 2010 or 2013 servers if you want to perform a Hybrid migration. As those servers don’t have any Hybrid components built-in, then for many organizations it means a part-migration to a newer version of Exchange Server. Typically, this means implementing co-existence with the newer version, and migrating some client-facing services across, such as Autodiscover, Exchange Web Services, ActiveSync and Outlook Anywhere.

It’s important to note that when you add Exchange Hybrid servers to your Exchange 2003/2007 organization you cannot move any mailboxes to the servers if you wish to qualify for a “free” Exchange Hybrid licence. That means you can’t (for example) stage mailboxes from Exchange 2003 to Exchange 2010 first, before moving them to Office 365.

Another key scenario where you are likely to need a Hybrid licence is after you have completed your migration from Exchange Server 2010 to Office 365. After moving your final mailboxes and if you have them, Public Folders, you will decommission Exchange Server 2010. Most organizations will keep Azure AD Connect in place after the migration completes, which means Hybrid Identity (where AD remains the master) is in place. You will therefore require require Exchange Server to manage those attributes – and potentially to relay SMTP email, too. This of course is a great use of an Exchange 2016 or higher server.

Finally – and it comes as a surprise to some organizations – if you have never had Exchange within the organization then you might need to install Exchange Hybrid servers for attribute management within the local AD. As mentioned above – if you use Azure AD Connect, you will have Hybrid identity in place. Many organizations running Domino today and migrating to Office 365 find they need to install an Exchange Hybrid server (or two) and utilize the free Hybrid licence.

Acquiring Exchange Hybrid licences

The process to acquire an Exchange Hybrid licence has recently changed. Previously, you would request Exchange Hybrid licences from the Office 365 portal. This of course, made it easy to request the licences you needed in advance in the same way you licenced Exchange Servers traditionally within your organization.

If you are licensing new Exchange Servers for Hybrid today, the process has changed. You will now licence new Exchange Hybrid servers within the Office 365 Hybrid Wizard.

When you run the Wizard, you will be able to choose the option Licence this server now to apply the Exchange Hybrid licence:

After choosing to licence the server, you’ll be provided with the option to copy product key if you need to apply the Hybrid licence key manually (for example, using the Exchange Admin Center, or PowerShell).

Exchange Server Exchange Hybrid, Licensing

About Steve Goodman

Steve is a Microsoft MVP for Office Servers and Services. He enjoys getting hands-on, solving some of the more complex problems associated with migrating to the cloud or to newer versions of Exchange Server.

Comments

  1. Walid Ibrahim says

    January 23, 2021 at 8:52 am

    Hi Steve,
    we are migrating from lotus notes to office 365 all mailboxes will be in office 365.
    and we have onprem AD so as in this case we will need onprem exchange to maintain exchange attribute or just the AD connect to sync the users and then we activate the license form portal

    Reply
  2. Michael says

    September 28, 2020 at 7:33 pm

    Hello Steve,

    I just came across this post while researching.

    We currently have one Exchange 2019 Server in our organization.
    Because of the fact that our partner status with Microsoft will end next year, we are currently looking for a way to move to Office 365.

    Can I setup an Exchange 2016 Server, license it with the free key, move the user to the cloud and then decommission the 2019 server?

    Regards

    Michael

    Reply
  3. Aussupport says

    July 16, 2020 at 10:21 am

    Hi,

    We are migrate all to the O365. But we are in hybrid mode and Exchange 2010 server on-premise.

    If we set up new Exchane 2016 server in AWS, Can we license the Exchange 2016 ?

    TA

    Reply
    • Steve Goodman says

      July 16, 2020 at 10:28 am

      Hiya,

      Assuming there is a connection to the domain and network, then yes – you will need a DC in the same site though. You can certainly, technically, licence the Hybrid Server using this method.

      Reply
  4. Uiros says

    May 27, 2020 at 5:17 am

    We have 2 huge exchange server databases (1Server) , the average mailbox size is 40 to 60GB. So we would like to use some of the 365 features, but still we would like to have the mailboxes in our server, due to expected bottleneck of internet connection.
    Thanks in avance for your cooperation.

    Kind Regards

    Reply
    • Steve Goodman says

      July 16, 2020 at 10:26 am

      It depends on the features in Office 365 that you want to use, to be honest. If you are running Exchange 2016 or 2019, then enabling Hybrid will allow for some use of integrated features (like the Calendar in Teams). However, many organizations do move mailboxes to Office 365 and have mailboxes of 40-60GB, so it might be worth revisiting the practical side of this before dismissing it.

      Reply
  5. Puly says

    January 19, 2020 at 5:36 am

    Hi, that’s work nice for mailbox role, but I have edge server in DMZ and this not licence this server.

    Reply
    • Steve Goodman says

      July 16, 2020 at 10:27 am

      Yes, this is licensing the servers using the method in the HCW.

      Reply
  6. Marc says

    November 28, 2019 at 12:27 am

    Hi Steve,

    we just finished the Migration from our Exchange 2010 Servers to O365. Now we would replace all Servers with one Exchange 2016. Which Server Roles did we need for this Hybrid Server (there will be no Mailboxes on it, we just use it as a Relay and to manage the exchange Attributes) ?

    Reply
    • Steve Goodman says

      July 16, 2020 at 10:24 am

      There is only one role (apart from Edge) when installing a full Exchange Server – Mailbox, which is effectively a multi-role Exchange server that includes Hybrid.

      Reply
  7. Ustadh says

    November 6, 2019 at 9:18 am

    Hi Steve, great article. I have a question if you would be kind enough. We have a hybrid setup on our 2013 servers with o365. We are going to migrat all mailboxes to o365 and want to add a management server 2016 in place before these are migrated and remove the 2013 hybrid servers after all mailboxes are migrated.

    Do we need to install a certificate ssl one on the 2016 server and configure EWS or autodiscover url on it to stop any outlook errors? Also assuming we need to install the mailbox role and management tools even though it’s only going to be used for smtp relay and management.

    Reply
    • Steve Goodman says

      July 16, 2020 at 10:23 am

      It would be advisable to migrate mailboxes before adding the management server. You would then be able to move client-facing names, like autodiscover to Office 365, making certificate management easier. It will just be the Mailbox role, which can be licenced for Hybrid.

      Reply
  8. Ryan W says

    August 14, 2019 at 3:13 am

    Hi Steve,

    Thanks for trying to provide some clarity where Microsoft have leftmuch confusion.

    From reading your other replies I understand a hybrid key should be available for Exchange 2016 but not 2019.

    A hybrid server cannot host mailboxes but there seems to be some uncertainty on if it’s allowed to be used for mail flow.

    I am hoping to build and load balance two Exchange servers for use as on-prem to Exchange Online SMTP relays. Do you think this is allowed? Can the same key exported from the HCW be used for both servers?

    I am asking the same questions of Microsoft but I suspect you may know more than them on this 🙂

    Reply
    • Steve Goodman says

      August 14, 2019 at 4:24 am

      Hiya,

      As you state the restriction is based on not being able to host mailboxes and not mail flow. It is very common to use a Hybrid Server for the purposes of SMTP relay.

      The FAQ from Microsoft states the following:

      “If you do not host any mailboxes on the servers used to connect to Microsoft 365 you can license them using the Microsoft 365 Hybrid Configuration Wizard (HCW) which you can find here.The HCW validates your Microsoft 365 subscription and installs the appropriate licenses on your servers. Note that the free Exchange Server license is not available for Exchange 2019 hybrid servers.”

      https://products.office.com/en-gb/exchange/microsoft-exchange-licensing-faq-email-for-business

      Yes the key can be used on more than one server and you can license them using the wizard.

      Steve

      Reply
  9. Michael Hanna says

    July 16, 2019 at 6:55 pm

    Good Day Steve,
    Microsoft Mentioned in a lot of articles that the following rights are included with all Microsoft 365 Enterprise E3 and E5 User SLs:

    Exchange Server, SharePoint Server, Skype for Business
    Server
    • Rights to install the server software an unlimited number of times on servers dedicated to the customer’s use
    • Downgrade rights included
    • Rights to access servers licensed with Volume Licensing licenses

    https://www.microsoft.com/en-us/licensing/product-licensing/microsoft-365-enterprise

    I just wanted to understand how i can license the on-Prem servers?

    Reply
    • Steve Goodman says

      July 17, 2019 at 3:03 am

      Generally the E3 and E5 SKUs come with the CALs, not the Server Product.

      The normal expectation for Exchange Server 2019 is that you will buy Exchange Server licences via your normal Enterprise Agreement (or similar).

      For example, buying 100 E3 licences doesn’t give me rights to install 5 Exchange Servers. I would need to buy Exchange Server licences (Standard or Enterprise Edition). However, I would not need to buy associated CALs (Standard or Enterprise) like normal, as I would have them with Office 365.

      The link you posted states this –

      “Microsoft 365 E3 and E5 provide the right to access server software running on Licensed Servers or to Manage Operating System Environments for the following products: Exchange Server, SharePoint Server, Skype for Business Server, Windows Multipoint Server, Windows Server, Advanced Threat Analytics, System Center Configuration Manager, and System Center Endpoint Protection.”

      You will find the full text in the Online Service terms and conditions.

      I will add, I am not a licencing expert at Microsoft – so please confirm anything with Microsoft or your licensing vendor!

      Reply
  10. JP Greyling says

    July 15, 2019 at 1:56 pm

    Good day Steve, thank you for the article. One question I have is, we are now fully migrated to Office 365 and have an Exchange 2013 Server, which I would like to replace with Exchange 2019 using the Free Hybrid License so that we can use it as our Management Box. It will do nothing else, but when I log onto our Volume Licensing Portal, Exchange 2019 is not available for download, do I need to request this or how do I go about getting the installs for it? I think Microsoft should make it easier to obtain Exchange 2019, like a trail version which you can license for Hybrid. Your help will be much appreciated. JP

    Reply
    • Steve Goodman says

      July 15, 2019 at 6:49 pm

      Hiya,

      I don’t believe there is a free Hybrid licence for Exchange Server 2019 – it is only available via Volume Licensing. Therefore unless you are upgrading to Exchange Server 2019 for running an on-premises email system, Exchange 2016 is the version to go to.

      Steve

      Reply
  11. Timothy Waldvovgel says

    June 21, 2019 at 2:28 am

    I do have a question pertaining to hybrid licensing and newer versions of Exchange. I had heard that the hybrid license will cover upgrading our exchange server to the 2019 version at no additional cost providing no mail is routed through the server. The understanding I had was that no mailboxes can exist on the server. However, Im not sure if mail contacts or mail enable security groups will create a licensing problem.

    Thank you.

    Reply
    • Steve Goodman says

      July 16, 2020 at 10:28 am

      Mail contacts or security groups will not create a licensing issue. However the most recent you can upgrade to for Hybrid only is Exchange 2016, not 2019.

      Reply
  12. Timothy Waldvovgel says

    June 21, 2019 at 2:28 am

    Just a heads up that the word LICENSE is misspelled many times on this page. Just as a courtesy.

    I do have a question pertaining to hybrid licensing and newer versions of Exchange. I had heard that the hybrid license will cover upgrading our exchange server to the 2019 version at no additional cost providing no mail is routed through the server. The understanding I had was that no mailboxes can exist on the server. However, Im not sure if mail contacts or mail enable security groups will create a licensing problem.

    Thank you.

    Reply
    • Steve Goodman says

      June 21, 2019 at 5:06 am

      Hiya,

      It’s my understanding you cannot request a free Hybrid licence for Exchange 2019, however you can licence it via your volume licence agreement.

      I am assuming by misspelled, you are suggesting that it’s spelled incorrectly in American English, rather than British and international forms?

      Steve

      Reply
      • Lee Neville says

        January 3, 2020 at 7:48 am

        The word “Licence” in the American idiom is used for both verb and noun contexts.

        In British or more accurately, Commonwealth/International usage, licence is the noun or the thing itself (e.g., “Hi Officer, here is my drivers licence”) while license is used to denote the verb or the state of being allowed to do something (e.g., “I have been licensed to fish these waters”).

        There are other similar cases in American idiom where verb/noun contexts have been collapsed into single form. Its not wrong per se, just a regional difference.

        Feel free to use the British/International formats, the only hassle being most word processing suites come with spell/grammar checkers configured with American dictionary as default.

        Reply
  13. Dan Kyaw says

    May 3, 2019 at 2:46 pm

    Hi Steve,

    We already have hybrid server (on-prem) which has been synchronizing successfully. we are planning to replace it with a new hybrid server which will now be located in the cloud. How do i go about licensing the new hybrid server? Also what is the best practice of dealing with existing on-prem hybrid server? all resources were migrated to the cloud a while back and this server was being used just for management purpose. Thanks.

    Reply
    • Manuel Berfelde says

      May 28, 2019 at 12:22 am

      Hi Dan,

      have you found a solution for this?
      I have the same question.

      Reply
  14. Matt says

    March 26, 2019 at 1:09 am

    Steve:

    I have a client that is using SBS 2011 and will be getting Office 365 Business Premium licensing. We were thinking of spinning up a new server to run Exchange 2016 and then using the HCW to license the Exchange 2016 server as the Hybrid server. We would then migrate mailboxes and decommission SBS 2011. Will this work, or will SBS 2011 and / or O365 Business Premium licensing prevent it?

    Matt

    Reply
    • Steve Goodman says

      July 16, 2019 at 7:18 pm

      I believe this would work – Business Premium allows for Hybrid, but doesn’t include on-premises CALs which aren’t needed for that scenario

      Reply
  15. Kevin says

    March 21, 2019 at 12:33 am

    Hello Steve,

    Great information here–Thanks for sharing!

    Is there a link to the Microsoft Terms of Licensing for the use of the Hybrid Key? I frequently encounter scenarios where my customer may have Exchange 2010 SP 3 (fully patched) – and as you have pointed out, is a version of Exchange that already has the hybrid functionality built in.

    As many clients understand that to remain in a “supported” configuration Microsoft recommends keeping at least one Exchange Server in the environment. The concern that is raised (especially in scenarios where EOL support is quickly approaching) could the HCW key be used as a means to remain in both a supported configuration AND with an Exchange Server version that is not “out of support”?

    If so- when running (or re-running) the HCW in an Exchange 2010 environment, would the option be presented to obtain this key (for 2016)? This remains a bit unclear and Microsoft seems a bit gray on this. (It is understood this key is for a “coexistence edition” which has limited functionality and cannot be used as a mailbox server).

    Your clarification and any supportive links would be HUGELY appreciated.

    Thank you sir!

    K

    Reply
    • Ted says

      April 23, 2019 at 8:29 pm

      Hi Kevin, did you find an answer to this?

      Reply
  16. gman77 says

    March 12, 2019 at 12:10 am

    we have exchange 2013 in house currently and am considering virtualizing it so it can be used for management purposes.

    if in a few years we need to upgrade exchange to a newer version, could you use this key?

    Reply
    • Steve Goodman says

      March 12, 2019 at 9:26 pm

      My understanding of the licensing terms would be that that is acceptable, and a fairly common end-point as well.

      Reply
  17. Rkast says

    February 12, 2019 at 2:53 am

    Nice write up. For a free key you cant have any mailboxes on the server or pf. But what if your IDM first creates a user and mailbox on-prem and then immediately move the mailbox to o365? Generatie a key when the box is empty but are you compliant and eligble?

    Reply
    • Steve Goodman says

      February 12, 2019 at 3:23 am

      The key will be generated regardless of whether there is a mailbox present, IIRC.

      In the above case, then it’s less about “getting the key” but ensuring you remain compliant with Microsoft licensing throughout the Exchange Server ‘s lifecycle. That might mean reconfiguring your provisioning system to stamp the new user object with the necessary attributes to make it a Remote Mailbox.

      Reply

Leave a Reply Cancel reply

You have to agree to the comment policy.

Recent Articles

  • Hands-on SharePoint Syntex Blog Series – Part I
  • The Practical 365 Weekly Update: S2, Ep 8 – What to expect in 2021, Solarigate, TLS in Exchange and new Teams updates
  • Security updates released for Exchange and SharePoint Servers 2010 to 2019
  • The Practical 365 Weekly Update: S2, Ep 7 – Urgent Exchange security updates, new Teams features launch
  • How to train your users against threats with Attack Simulation Training
Practical 365

Related Posts

Related Posts

Training Courses

  • Configuring and Managing Office 365 Security
  • Office 365 Admin Playbook
  • Exchange 2016 Exam 70-345
  • Managing Exchange Mailboxes and Distribution Groups in PowerShell
  • More Training Courses...

Recommended Resources

  • Office 365 Security Resources
  • Office 365 Books
  • Exchange Server Books
  • Exchange Server Migrations
  • Exchange Analyzer
  • Digicert SSL Certificates

About This Site

Practical 365 is a leading site for Office 365 and Exchange Server news, tips and tutorials. Read more...

Find out more about advertising with us.

Contact us


Subscribe to our newsletter
  • Facebook
  • Twitter
  • RSS
  • YouTube

Copyright © 2021 Quadrotech Solutions AG · Disclosure · Privacy Policy
Alpenstrasse 15, 6304 Zug, Switzerland