In the last part of this series of articles I demonstrated setting up a Hybrid configuration between on-premises Exchange Server and Office 365. With the Hybrid in place it’s time to start planning to migrate mailboxes and cut over services such as mail flow.

Currently the organization is in a state where:

  • All mailboxes are on-premises
  • All remote clients connect to the on-premises servers
  • All mail flow runs through the on-premises Exchange organization, via the Edge Transport server

exchange-hybrid-testing-start

Where want to be is a state where:

  • Mailboxes can be on-premises or in the cloud, depending on the business needs
  • Cloud mailbox users can connect to their cloud mailbox, but on-premises mailbox users continue to connect to on-premises servers
  • Mail flow is going through Office 365 to take advantage of Exchange Online Protection

exchange-hybrid-testing-goal

Rather than just barrel ahead with changing MX records and migrating production mailboxes, it is a good idea to do some testing first. In this article I’ll test the Hybrid configuration by:

  • Creating a test mailbox in Office 365
  • Verifying mail flow between on-premises Exchange and Exchange Online is working
  • Verifying that the client experience of Exchange Online is working (e.g. GAL visibility, free/busy lookups, ActiveSync device redirection)
  • Moving a test mailbox from on-premises Exchange to Exchange Online

Let’s get started.

Creating a Mailbox in Office 365

With the Hybrid configuration in place we can use the Exchange Admin Center to create new Office 365 mailboxes.

exchange-hybrid-testing-02

For my environment I just need to make sure that I choose an Organizational Unit that is included in my Azure AD Connect synchronization. Aside from that, fill out the other details such as name and password as you normally would.

exchange-hybrid-testing-03

Switching to the Office 365 section of the Exchange Admin Center, we can see that the new mailbox is not immediately visible.

exchange-hybrid-testing-04

Directory synchronization of the new user needs to occur, and an Office 365 license needs to be assigned. We can wait for the next directory synchronization cycle to occur, or force a synchronization immediately to speed things up. I prefer to wait, because it allows me to verify that directory synchronization is working fine on its own.

When directory synchronization has occurred the new user will be visible in the Office 365 admin center, and can be assigned a license there.

exchange-hybrid-testing-05

Alternatively, use PowerShell to connect to Office 365 and assign the license, by setting the location for the user and then assigning the appropriate SKU.

PS C:\> Connect-MsolService

PS C:\> Get-MsolAccountSku

AccountSkuId                                                            ActiveUnits     WarningUnits    ConsumedUnits
------------                                                            -----------     ------------    -------------
exchangeserverpro:ENTERPRISEPACK                                        25              0               0
exchangeserverpro:PLANNERSTANDALONE                                     300000          0               0

PS C:\> Set-MsolUser -UserPrincipalName hybridtest2@exchangeserverpro.net -UsageLocation "AU"

PS C:\> Set-MsolUserLicense -UserPrincipalName hybridtest2@exchangeserverpro.net -AddLicenses "exchangeserverpro:ENTERPRISEPACK"

Within a few minutes the mailbox should be visible in the Exchange Admin Center.

exchange-hybrid-testing-06

Launching Outlook on a computer will verify whether Autodiscover is able to configure the Outlook profile to connect to the cloud mailbox. Note that the user will need to provide their credentials to authenticate to Exchange Online. Thanks to password synchronization they can use the same email address (which should match their UPN) and password as they use on-premises, and save the credentials to avoid being prompted every time.

exchange-hybrid-testing-07

Verifying Mail Flow

Now that I’ve got a working mailbox in the cloud it’s time to do some mail flow tests. Simply put, the cloud mailbox should be able to send and receive emails for on-premises mailboxes, as well as external mailboxes.

To test this I’ve added another mailbox to the on-premises environment. I’m using a brand new mailbox for this because I will be migrating it to the cloud later as a test of the migration process, and it’s faster to migrate a nearly empty mailbox. However, if I was interested in testing migration throughput, I would use mailboxes with more content in them.

Keep in mind that any on-premises mailbox user you create needs time to synchronize to Azure AD before the cloud mailbox user will see them in the GAL.

Sending an email from the cloud mailbox to an on-premises and and external recipient should do the trick.

exchange-hybrid-testing-08

When the emails arrive simply reply to them to confirm the return path is working as well.

exchange-hybrid-testing-10

You should also run the message headers through the message analyzer at ExRCA.com so you can verify that the path the emails took was the expected path.

exchange-hybrid-testing-09

Verifying the Client Experience

By testing the mail flow we’ve already confirmed that GAL visibility for the on-premises and cloud mailboxes is working as expected. Another aspect of the client experience is free/busy lookups between on-premises and cloud mailboxes. To test this we can simply create a new meeting request in Outlook, and have each mailbox look up the availability of the other.

exchange-hybrid-testing-11

If free/busy lookups are working then you shouldn’t see any of the “No Information” indications for any of the recipients. To take it a step further, book one meeting between the two recipients and then create another meeting request, and you should see the existing meeting in their free/busy info.

exchange-hybrid-testing-12

Note, free/busy lookups need to be working in both directions, so make sure you test this from both sides of the Hybrid environment.

We still want to test ActiveSync redirection for mailbox users. ActiveSync redirection will automatically reconfigure an on-premises mailbox user’s mobile device to point to Exchange Online after they are migrated to the cloud. So in order to test this, we need a mailbox with a mobile device already connected to it (which I have already set up), and then we need to perform a mailbox migration.

Migrating a Mailbox to Exchange Online

Since I already have a test mailbox, Hybrid Test 1, on-premises with an Outlook profile and a mobile device connected, it will be a good candidate to test the mailbox migration process.

To initiate a mailbox migration use the Exchange Admin Center. Select the Office 365 section, and navigate to Recipients -> Migration.

Start a new migration batch to “Migrate to Exchange Online”.

exchange-hybrid-testing-13

The migration type is a “Remove move migration”. Step through the wizard, adding the test mailbox to the migration batch, creating a migration endpoint if necessary, and giving the migration batch a name. You will also need to specify an email address to be notified when the batch has completed. For test migrations I prefer to simply allow the migration batch to automatically complete.

exchange-hybrid-testing-15

Wait for the migration batch to complete, then restart the Outlook client for the migrated mailbox user. Autodiscover should reconfigure them to connect to Exchange Online, and their mobile device should also be automatically updated the next time it tries to connect. In reality this may not work immediately, but should begin working after a short wait.

After completing the migration you might also like to re-test mail flow and free/busy, just to be sure there’s no lingering issues.

Summary

In this article I’ve demonstrated techniques for testing a Hybrid configuration, so that you can be confident that the end user experience will be good when you perform your mailbox migrations to the cloud. In the next part of this series, I’ll move the organization another step closer to the end goal by demonstrating the cut over of mail routing to Exchange Online Protection.

[adrotate banner=”50″]

About the Author

Paul Cunningham

Paul is a former Microsoft MVP for Office Apps and Services. He works as a consultant, writer, and trainer specializing in Office 365 and Exchange Server. Paul no longer writes for Practical365.com.

Comments

  1. Ram

    Hi – Just completed HCW on EX2019. Was testing mail flow. Here is the issue.

    On Premise users cannot email O365 User
    O365 users can send email to On Premise

    After HCW, I have 2 send connectors – 1 for DNSExit Mail Relay Service and 1 for Outbound O365. Do, I need to configure anything for Outbound O365 connector?

    Thanks

    Ram

    1. Ram

      Never mind – I was able to fix the issue. During HCW a new send connector was created. I had to remove or delete the connector because, I am using DNSExit relay service. The relay service takes care of delivering on-premises email to Office 365 users.

  2. Mike LaForest

    He will never respond here. These are good guides. The guides are AS is. Take it for whatever it’s worth

  3. Carol Ostos

    Hey guys, hoping someone can help clarify this one, we no longer have any exchange mailboxes on premise, all mailboxes run off O365(Exchange Online). While updating ADFS certificates, I started looking at the Exchange OnPremise certs and realised the Federation certificate expires soon. Gathered a few outputs for my reference (before update) and stumble across this cmdlet to Test-FederationTrust which returns “Failed to request delegation token” (token came back null).

    Google (my best friend) suggested the following

    If you see any validation errors, you can update AD with the latest Microsoft Federation Gateway certificate one time by running the following cmdlet from EMS on any Exchange server in your org:
    Get-FederationTrust | Set-FederationTrust –RefreshMetadata

    Once updated, run the Test-FederationTrust cmdlet again to confirm the validation and delegation token is valid.

    After running the refresh metadata, still getting the same error “Failed to request delegation token” (token came back null)

    This guy suggest try “recreate the trust” https://supertekboy.com/2017/02/11/the-delegation-token-is-null-hybrid-freebusy/ which I can also attempt but thought check if anyone else had any thoughts before trying this

    1. Rob

      Hi there!
      Did you resolve this?
      All research suggest to recreate federation trust to resolve delegate token null issue.

      Please confirm how did you resolve this?

  4. Mourad Yemmi

    Paul,

    is it possible in Hybrid environment where the majority of mailboxes are still on premises, Exchange 2016, to redirect OWA external access to use exchange Online instead of on Premises exchange servers, we want to take advantage of MFA and more…

    Thanks

  5. Tex Standridge

    Paul,

    I feel it should be noted. After setting up the Hybrid Configuration on Exchange 2016 (v15.1 1847.3)
    When I clicked on the “Office 365” inside of the EAC, it would take me to their product pricing page, as someone above mentioned.

    I played with permissions and other nonsense, wasting the better part of a day.
    It was a simple case of EAC forgetting my credentials after setup, and apparently it’s fairly common.
    I fixed this simply by going back to the hybrid tab choosing “Modify” and clicking “Sign in to Office 365” boneheaded for sure, but a solution to a problem others might have come across as well.

    1. Ram

      Nice one Tex. I too had same problem. It took me to price page. I did not understand why and what. I did try O365 login page URL directly and it worked.

      I should agree with your solution – Hybrid – Modify – Sign in O365 – All good now.

      Thanks

      Ram

  6. hongwoo jin

    Hi, Paul

    We did make up HCW 2013, but when we try to mail box migration , it takes so long than we expected, even if that test mailbox size is a light as minor 25MB, so I tried to run command using new-moverequest -remote -id cmdlet, then if I see the details of monitor using Get-MoveRequest | Get-MoveRequestStatistics , CopyingMessages status takes time so long, do you know why it happen to so long or do you have any ways to check performance of mailbox migration in HCW2013.

  7. Shaun

    Hello,
    It seems to have been a while since the last post, but I’m hoping you still monitor this! Lol

    I have complete the HCW setup for a hybrid environment for the onprem exchange 2010 server. We are only syncing specific OUs to control and test the migration in our domain. We currently have a .local domain, and we’ve added the .com domain to the UPN. Our mailflow has tested fine, free and busy information is populating, however, users only see other synced O365 users in the O365 environment. They do not see the on prem users, users on prem do see the users in O365 however.

    I’m struggling to find the cause, i have enabled centralized transport, my on prem domain email address is setup as a relay, as I’m avoiding paying the additional license for users to use eop to keep the mail routing thru the on prem.

    Any assistance is very appreciated!

    1. Steve Baker

      I had the same issue.

      I ran Get-OrganizationRelationship | FL and noticed that in the DomainNames list, there was only the “contoso.mail.onmicrosoft.com” listed.

      So I went in to the Exchange Control Panel, to the Organization tab, then the Relationship section, where Organization Relationships are listed, double-clicked it, and added the actual email domain (contoso.com), after which I did an iisreset on the Exchange server, and on-premises Free/Busy became visible to Office 365 mailboxes.

      I hope that helps.

      Sources:

      https://support.microsoft.com/en-gb/help/2555008/how-to-troubleshoot-free-busy-issues-in-a-hybrid-deployment-of-on-prem

      https://support.microsoft.com/en-gb/help/2667844/user-can-t-view-free-busy-information-for-a-remote-user-in-a-hybrid-de

  8. Riley

    Thanks for the articles!

    Typo > The migration type is a “Remove move migration” should say “Remote move migration”

  9. Patrick

    Hi, as far as autodiscover is concerned. I ran the minimal hybrid in the HCW. then I migrated a test user from on prem to the cloud. then i tried to setup an outlook 2016 profile but it failed to setup the profile. I made no change to my internal / external autodicover record so its still pointing to the on prem server. should I instead move my users to the cloud but not complete the migration until I have updated my Autodiscover and MX records? or am i missing something regarding the autodiscover record?

    Thanks,

  10. Karthik

    Hi Paul,

    If I want to setup exchange hybrid setup at home for practice (lab), is it possible with evaluation licences of windows and exchange?

    Thanks,
    Karthik

  11. Mike

    Hi Paul,

    I have a question about analyzing the headers of the messages between Office 365 and on-prem Exchange. I have setup hybrid in my organization and I am able to send email to/from Office 365 and on-prem. My results of the header analysis look similar to your screenshot, but what I am looking for specifically to indicate that mail flow is happening over the hybrid connector?

    Thanks,
    Mike D

  12. Nitesh

    Hi Paul ,
    Thank you for the article , I have one question I have new Office 365 hybrid configured . In this environment I am unable to send email from on-Premise or from external email address to Migrated Office 365 mailbox . Outbound send connector was configured using Hybrid Setup.

    Any solution how this can be resolved.

  13. Quentin

    Hi Paul, thanks for this great article.
    Just one question, in a Hybrid deploiement (Exch2010 SP3 & Office 365), do I have to configure my companydomain as a “Internal Relay” ?
    thank you very much. Regards

  14. Ram

    Hi Paul – Thanks for the info. I did sign up for trial Enterprise E3 with 25 Lic. Completed EX2016 Hybrid and tested everything. All working fine. My setup is single EX2016 without Edge.

    My question – If there are multiple EX2016 server within the network (Say DAG – 2 Servers) – what is the procedure to complete Hybrid configuration?

  15. Ram

    Hi Paul – Excellent document. I am following your document to convert my home exchange 2016 lab to hybrid. So far, I have done the following:
    1. Completed Azure AD
    2. Have access to Office 365 Admin Center
    3. Completed Hybrid configuration
    4. Office 365 Admin Center has all AD account info (that is users)

    In order to test hybrid configuration – I need to sign up for O365 license for the users. Since this is home lab – which license, I should go for so, I can complete hybrid test by following your document? As, I see you are using EnterprisePack license.

    Thanks

    Ram

  16. Yam

    Hey Paul, If you can please clarify my below query-

    We are planning Migration from Exchange 2010 to Office 365 with Exchange 2016 Hybrid, currently all the mailboxes reside on 2010, 2016 will be introduces as new server into the same Exchange organization

    When planning the mailbox migration, i should first move them from 2010 to 2016 and then to Office 365 or i Can directly move from Exchange 2010 to Office 365

  17. Roberto Oviedo

    Hello Paul, you can orientate me on a little problem that seems insignificant but always worked until we updated the last CU of EX2013 and enabled Group WriteBack in ADConnect to synchronize the groups of Office 365.

    The problem is that when I enter the ECP of my Hybrid server and I want to switch to the tab Office 365 sends me to the page to compare plans and not to the login of my tenant.

    Everything seems to be working only that specific point is the one we have not found that may be happening.

    Thanks in advance.

    1. Avatar photo

      Yeah there was an issue like that, but fixed a long time ago. If you’re seeing it today it might be due to the version you were upgrading *from*.

      I did some searching and couldn’t find the specific info I was looking for. It might actually be this issue and fix that you need, but I’m not 100% sure. It’s been a while since I’ve seen that issue.

      https://gallery.technet.microsoft.com/Exchange2013-KB2997355-02d48491

  18. Juan Villarreal

    So I’ve read up on Offboarding from O365 to on-prem and it seems like a fairly simple process if you have a brand new spanking AD.
    I have a company that has been acquired and is merging. They have on premise exchange server with an existing domain and users. They will add 9 additional domains as aliases. 2 of those domains are different Office365 tenants. How do you handle the migration of something like this? How does the Exchange Guid handle the import of a user that already has a viable mailbox? Is there a way to just mass import all the mailboxes and then just attach them to an AD user later?

  19. MARIUS

    hELLO Paul ,
    (exchange hybrid migration)

    sorry can you help me to solve mail flow problem ?

    after migrating two mails box to office 365 , those user’s can send email from 365 to external users, but theire can not receive email .

  20. TeamTerry

    Note that there is a known issue with Exchange 2013 CU-13 and CU-14

    Issue with Free-Busy in Exchange 2013 – CU13 and CU14
    Free-Busy was not working in the new Hybrid configuration.
    A failure in the Exchange Remote Connectivity Analyzer had this error –
    — The remote user mailbox must specify the the explicit local mailbox in the header —

    Resolution – https://social.technet.microsoft.com/Forums/office/en-US/f96cb52f-5b72-4815-b871-4c5364c1e07a/the-remote-user-mailbox-must-specify-the-the-explicit-local-mailbox-in-the-header?forum=exchangesvrclients

    Other Information – https://support.microsoft.com/en-sg/kb/3001281

    Resolution (from the TechNet link above
    I opened a case with Office 365 Support and this was my resolution:
    1. Get-AutodiscoverVirtualDirectory | Set-AutodiscoverVirtualDirectory -OAuthAuthentication $False
    2. Get-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory -OAuthAuthentication $False
    3. Post disabling, perform IISRESET and test.
    4. You need to do this when users are accessing emails and IISRESET may interrupt the email delivery.
    5. Disable OAuth on Exchange Online also, as per article – https://support.microsoft.com/en-sg/kb/3001281
    Get-IntraOrganizationConnector | Set-IntraOrganizationConnector -Enabled $false

    Once I did this, my Free-Busy worked.

  21. HSC-TSA

    Hi Paul,
    And thank you, once again for this article.

    I’ve migrated all mailboxes from Exchange 2013 to Exchange Online, then upgraded the Exchange 2013 to 2016 having two server on-premises, and successfully run “Microsoft Office 365 Hybrid Configuration Wizard”.

    Q. How often the sync run between the Exchange 2016 and Exchange Online, as all mailboxes reside on O356? And how to check the sync status?

    TIA

    1. Avatar photo

      Exchange itself doesn’t run any synchronization. The synchronization that is performed is the directory synchronization, which is handled by whichever directory sync tool you deployed (ideally Azure AD Connect).

  22. Scott

    Good Afternoon,

    We are an office 365 shop. We currently have an exchange 2003 server in our environment that we are looking to decommission. Our goal is to get to 2016 in hybrid mode so we can manage our office 365 mailboxes via the EAC. Does this make sense? We are never going to have on premise exchange however since we need to get rid of exchange 2003 we need an exchange server to take its place. Any help would be appreciated

    1. Avatar photo

      From 2003 the furthest you can migrate in one hop is 2010, so that’s your first step.

      2010 is capable of hybrid but long term I believe you’re better off with 2016 anyway. So from 2010 you can migrate to 2016, or just introduce 2016 for the hybrid functionality and move the mailboxes from 2010 -> Exchange Online, then decommission the 2010 server.

      Our Office 365 for IT Pros book has a lot of detail on hybrid.
      https://www.practical365.com/ebooks/office-365-for-it-pros/

  23. Tony

    One last query here, am i right that following this method of Hybrid (ie not Full Hybrid) means that O365 migrated users wont be able to access Public Folders from on Premise?

    Is there a way around this without a federation trust?

      1. Tony

        Hi Paul,

        I assumed that this particular method isnt the Full Hybrid which requires ADFS and federated trust that offers full cross platform functionality.

        I am currently putting together a Hybrid environment following your great article and wanted to know if i can have O365 migrated mailboxes still access the Public Folders of the on premise Exchange without the need to go down the Full Hybrid route.

        Appreciate any advice.

        1. Avatar photo
          1. Tony

            Apologies for not using the correct terminology, i appreciate that confused things!

            Thanks for your time here Paul, the link is a massive help.

            Keep up the great work.

  24. Tony

    Hi Paul,

    Since running the Hybrid wizard and completed, i noticed that when i click the Office 365 Cross Premise link in EAC, i am taken to the MS website rather than the control panel for O365. Do i need to allow time for this to take effect once i have run the wizard?

    1. Tony

      Got this working now 🙂

      Great guide by the way Paul, keep up the fantastic work.

  25. Jean-Luc

    Hi Paul,
    And thank you, once again for this article.
    Do you think hybrid configuration is adapted to Exchange mailboxes migration from O365 to Exchange on premises? On the AD Infrastrucure, there is not yet Exchange Organization.
    Do you mentions this scenario on the 3rd edition of” office 365 for exchange professionals”?
    Best regards

    1. Avatar photo

      Hybrid is the only supported method of off-boarding mailboxes from EXO to on-premises Exchange. The challenge is with the directory synchronization part. When you build a brand new Active Directory and sync it up to an existing Office 365 tenant, you have to be very careful to ensure the accuracy of the attributes and values of the on-premises AD objects (e.g. names, email addresses), because they will overwrite the values in Office 365 when directory sync begins.

  26. Em-em

    Hi Paul,

    This is one flawless Hybrid Migration guide you have here.

    I was wondering, do you have a separate article for a fallback plan if ever something comes up with exchange online?

    1. Avatar photo

      If you leave the hybrid configuration in place you can easily off board the mailboxes. If you remove the hybrid, it can be re-established reasonably easily. If you remove directory sync, it gets a lot harder to re-establish hybrid.

  27. Scott

    Hi Paul,

    I have a question regards the “MIGRATING A MAILBOX TO EXCHANGE ONLINE” part.

    Will the mailbox be offline/unavailable during this migration as well just like when we migrate users from a local Exchange 2013 to local Exchange 2016?

  28. Olaf

    What if the admin has created the mailbox in Office 365 instead of in the EAC on the Hybrid? How can I match this with the On Prem environment?

    1. shahin

      Hi Olaf,

      Did you run this command to enable EAP?

      Set-TransportConfig -AddressBookPolicyRoutingEnabled $true

      When ABP routing is turned on, users that are assigned to different GALs appear as external recipients and won’t be able to view external recipients’ contact cards.

  29. Saul

    Hi Paul,

    When testing “Federation trust” it seems to fail on the last part. It failed to request delegation token. Microsoft wasn’t able to help us on this case. Maybe you can enlighten us with this.

    STEP 5 of 6: Requesting delegation token…
    RESULT: Success. Token retrieved.

    Closing Test-FederationTrust…

    RunspaceId : 49a4a988-df50-4c56-9e1a-c76876d3e0ce
    Id : FederationTrustConfiguration
    Type : Success
    Message : FederationTrust object in ActiveDirectory is valid.

    RunspaceId : 49a4a988-df50-4c56-9e1a-c76876d3e0ce
    Id : FederationMetadata
    Type : Success
    Message : The federation trust contains the same certificates published by the security token service in its
    federation metadata.

    RunspaceId : 49a4a988-df50-4c56-9e1a-c76876d3e0ce
    Id : StsCertificate
    Type : Success
    Message : Valid certificate referenced by property TokenIssuerCertificate in the FederationTrust object.

    RunspaceId : 49a4a988-df50-4c56-9e1a-c76876d3e0ce
    Id : StsPreviousCertificate
    Type : Success
    Message : Valid certificate referenced by property TokenIssuerPrevCertificate in the FederationTrust object.

    RunspaceId : 49a4a988-df50-4c56-9e1a-c76876d3e0ce
    Id : OrganizationCertificate
    Type : Success
    Message : Valid certificate referenced by property OrgPrivCertificate in the FederationTrust object.

    RunspaceId : 49a4a988-df50-4c56-9e1a-c76876d3e0ce
    Id : TokenRequest
    Type : Error
    Message : Failed to request delegation token.

    Error. Attempted to get delegation token, but token came back as null.
    + CategoryInfo : NotSpecified: (:) [], LocalizedException

    Thanks,

    1. Rob

      Did you resolve this..!? We have same issue and delegate token null and all reaseach end at recreating federation trust

  30. Kurbo

    Thanks for the help. I would like to clarify the following questions

    1- Where do i have to point my MX recods, can i leave them pointing to my on-prem Exchange and also can i point on O365 with higher priority and on prem with lower?

    2- Can mailboxes reside on both exchanges and will it update automatically on each side? Thanks in advance

    1. Avatar photo
      1. Kurbo

        Thanks for your reply

  31. Brad Parsons

    We have been following these steps but just thus week have started to receive this error

    “Unsupported recipient type ‘Mailbox’ provided. Only ‘Mailuser’ is supported for this migration type.”

    Any insight would help.

    Thank you

      1. Kevin

        This is happening to me to. This is occurring when trying to migrate from OnPrem Exchange 2013 to O365.

        One article said to remove the license from the user, migrate, then re-license the user. This did not work for me. I have also tried to remove the license from the user, let it set for an hour, relicense, let it set for another hour, then try to migrate. Again it fails with this error.

        When I login as the user to their O365 account, and try to click on mail, it simply states that ‘The mailbox isn’t available. This may have occurred because the license for the mailbox has expired. To find out how to gain access to this mailbox again, contact the person who manages your email account.’

      2. Kevin

        I fixed this. Essentially I had to move the users in question to a non-sync’d OU in AD, then perform a directory sync. Once O365 removed the users, I had to remove them from the O365 Recycle bin with ‘Get-MsOLUser -all -returndeletedusers | Remove-MsOLUser -removefromrecyclebin -force’

        Once they were permanently deleted from O365, I put them back in their original OU and again, I sync’d. I looked in two places to verify. 1: Unlicensed Users and 2: Contacts. You must wait until they show up in Contacts. Do not license them yet.

        The GUI migration mechanism has a flaw/bug in it so you have to do it via Powershell.
        I issued the following:
        $O365Cred = Get-Credential
        $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $O365Cred -Authentication Basic -AllowRedirection
        Import-PSSession $Session
        $OnPremCred = Get-Credential

        import-csv migrate.csv | foreach {New-MoveRequest -Identity $_.UPN -Remote -RemoteHostName ‘nameofmyserver.mydomain.com’ -RemoteCredential $onpremcred -TargetDeliveryDomain ‘domain.mail.onmicrosoft.com’}

        It then migrated them appropriately. Once their migrations have completed then you can license them appropriately.

        in the migrate.csv I just had one column which was their full UPN user@mydomain.com.

  32. Mukhan

    Hi Paul,

    good job just right on time.

    I am using this guide to test our HCW,

    I used to track messages through Get-MessageTrackinglog cmdlets, are these commands still valid in Office 365??

    Please reply

  33. Will

    Change text in 2nd bullet point
    All remove > All remote

Leave a Reply