Solved

Office 365 staged migration with dummy forest using adfs and dirsync

Posted on 2013-06-13
2
1,001 Views
Last Modified: 2013-07-11
we are planning a migration to office 365 from current on premises exchange 2007, then plan is as below

-to support multiple forest 365 scenario (which MS dont support at present in one tenant) for other parts of business we will create dirsync forest which should allow us to add the first company.local forest to 365 without limiting options for adding our other forests to the 365 tenant in future, so this will act as the consolidation point for all company forests.
-install adfs and adfs proxies and dirsync into this empty forest
-then create a domain trust from this forest to our existing forest of company1.local
-setup 365 tenant as the company.com (the dirsync forest) and then add the company1.local's external domain of company1.com into tenant (which are presently set as the UPN in the company1.local forest)
-obviously any users in the new sync forest can be synced easily with dirsync but does FIM2010 or something else need to be used to allow DirSync to "know" about the users in the other forests (i.e. the company1.local forest)
-if all sounds ok to here can i then confirm the adfs SSO will then allow login using the sync forest as it will have a AD trust to the .local domain
-now at this point we need to migrate mailboxes to 365 by installing exchange 2010 into company1.local to allow for coexistance as 2007 not supported in staged migration, would this cause any issue as it would be connecting direct to 365 rather than via the dirsync forest?

my question is can anyone see any major issues with this idea or give any advice on any points. i know its a pretty hefty ask maybe need 1000points for this
0
Comment
Question by:active8it
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 40

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 39246693
You have two options, sync your forests into new one and dirsync from the new one to Office 365. Or, use FIM, which is the better option as it can take care of overlapping objects. I strongly advise contacting Microsoft or at least some major partner for help with this.

There are also 3rd party solutions which offer this, but I'd go with Microsoft support :)
0
 
LVL 2

Author Comment

by:active8it
ID: 39272256
can you provide any documentation or a case study that shows the consolidation forest / usage of FIM. i presume using this method the users will all be created on the new forest automatically by FIM.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Enabling the Skype for Business Meeting Scheduler in Hybrid OWA
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video discusses moving either the default database or any database to a new volume.

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question