Solved

Office 365 staged migration with dummy forest using adfs and dirsync

Posted on 2013-06-13
2
1,004 Views
Last Modified: 2013-07-11
we are planning a migration to office 365 from current on premises exchange 2007, then plan is as below

-to support multiple forest 365 scenario (which MS dont support at present in one tenant) for other parts of business we will create dirsync forest which should allow us to add the first company.local forest to 365 without limiting options for adding our other forests to the 365 tenant in future, so this will act as the consolidation point for all company forests.
-install adfs and adfs proxies and dirsync into this empty forest
-then create a domain trust from this forest to our existing forest of company1.local
-setup 365 tenant as the company.com (the dirsync forest) and then add the company1.local's external domain of company1.com into tenant (which are presently set as the UPN in the company1.local forest)
-obviously any users in the new sync forest can be synced easily with dirsync but does FIM2010 or something else need to be used to allow DirSync to "know" about the users in the other forests (i.e. the company1.local forest)
-if all sounds ok to here can i then confirm the adfs SSO will then allow login using the sync forest as it will have a AD trust to the .local domain
-now at this point we need to migrate mailboxes to 365 by installing exchange 2010 into company1.local to allow for coexistance as 2007 not supported in staged migration, would this cause any issue as it would be connecting direct to 365 rather than via the dirsync forest?

my question is can anyone see any major issues with this idea or give any advice on any points. i know its a pretty hefty ask maybe need 1000points for this
0
Comment
Question by:active8it
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 41

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 39246693
You have two options, sync your forests into new one and dirsync from the new one to Office 365. Or, use FIM, which is the better option as it can take care of overlapping objects. I strongly advise contacting Microsoft or at least some major partner for help with this.

There are also 3rd party solutions which offer this, but I'd go with Microsoft support :)
0
 
LVL 2

Author Comment

by:active8it
ID: 39272256
can you provide any documentation or a case study that shows the consolidation forest / usage of FIM. i presume using this method the users will all be created on the new forest automatically by FIM.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
A hard and fast method for reducing Active Directory Administrators members.
A company’s greatest vulnerability is their email. CEO fraud, ransomware and spear phishing attacks are the no1 threat to a company’s security. Cybercrime is responsible for the largest loss of money to companies today with losses projected to r…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question