Solved

Dirsync setup

Posted on 2013-11-04
13
1,005 Views
Last Modified: 2013-11-06
Hi,
We have a Server 2003 domain running Exchange 2003, I also have a server 2008 r2 member server. We have purchased an Office 365 subscription to replace the in-house Exchange.
I have been reading up on dirsync and want to use it to keep the domain and O365 login details in sync. My questions are:
1. can i install dirsync and use it to populate the O365 environment with all the users in advance of the cut over to O365 for email delivery, i.e with internal Exchange still running?
2. i know i have to create an OU in AD to put all the existing AD users in that will have O365 accounts, do I also need to add a UPN name in AD, is this the 'user logon name (pre windows 2000)' if so does this name need to be the same as the email address in O365?
Thanks
Andrew
0
Comment
Question by:activateahsd
  • 7
  • 6
13 Comments
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
1) If you are going for cutover migration, you dont need dirsync. It will not allow you to actually perform this if you have dirsync running. Don't worry about the details, the migration process will connect to the on-prem server and get everything from the GAL (apart from hidden objects). You can run dirsync after the migration is over.

2) If you are going to use a custom domain with Office 365, make sure you add this domain as UPN suffix in your AD. Then, change the UPNs of every user you are going to migrate to the cloud to match the new UPN suffix. The UPN and primary email address do not need to match.

Here is the article on cutover migration just in case:

http://help.outlook.com/en-us/140/Ff628719.aspx

Compare different types of migration:

http://help.outlook.com/en-us/140/538c48ad-4a3d-4777-be1b-7fc533ca45eb#migrationmatrix
0
 

Author Comment

by:activateahsd
Comment Utility
Hi, Thanks for the info, really useful.
I think I have got my terminology wrong, as per the microsoft definition I am not doing a 'cut-over' migration. There are only 22 users and they want blank new mailboxes with historical email only available as a locally storted pst file.
So I think what I need to do is manually create the 22 users in O365, then alter the MX records so email starts flowing via O365 rather than internal Exchange. At that point I guess I need to amend the users AD logins to be the new UPN which matches their O365 login (and their primary email address). Once that it done I can install dirsync to keep AD password changes in sync with O365 credentials.
Have I understood it right?
Thanks
Andrew
0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
Go with staged migration instead, you can have dirsync running from the start with it:

http://help.outlook.com/en-us/140/ff959224.aspx

You will need a valid CA certificate for Outlook Anywhere, if you don't have such you can get one for free from comodo or startssl.com.

Doing things manually will also work, but will probably get you into more issues. Just update the UPNs first, set up dirsync and proceed with the migration. Once you read the articles it's not that complicated :)
0
 

Author Comment

by:activateahsd
Comment Utility
Hi - they dont want to import anything to the new mailboxes. Can I install dirsync after everything is up and running just to keep password changes synced?
0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
OK, the idea behind all those methods is to migrate not only the account (and their corresponding attributes), but also the mailbox data associated with them. If you are NOT going to migrate any mail, all you need is dirsync.

Sorry if I have misunderstood you :)

Just to make sure you have displayName set for any groups you want to migrate, otherwise the dirsync process will just skip them.
0
 

Author Comment

by:activateahsd
Comment Utility
Hi, your being very helpful thank you.
Sorry if I am asking dumb questions, I have moved all my required users into a new OU in AD in preparation, when you mention displayname are you talking about the users 'simple display name' in Exchange?
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
No, the actual displayName attribute.
0
 

Author Comment

by:activateahsd
Comment Utility
sorry but where do i find that?
thanks.
0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
Oh, 2003 domain? Use adsiedit.msc :)

Couldn't find a nice guide with screenshots and all, so here's a link to a similar question on EE: http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_27462346.html
0
 

Author Comment

by:activateahsd
Comment Utility
of course, thanks!
So its the OU group I have to set the displayName attribute on? Does it have to be anything in particular?
Thanks.
0
 
LVL 38

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
Comment Utility
No, no. This is for group objects, such as mail enabled security groups/distribution groups. The default dirsync filters will exclude any such objects that don't have displayName set. So if you want to migrate them as well, make sure the attribute is populated.

If you plan to create them manually or don't want to copy them to the cloud, ignore this.
0
 

Author Comment

by:activateahsd
Comment Utility
OK thanks for all your help, really useful knowledge for my first O365 setup!
cheers
Andrew
0
 

Author Closing Comment

by:activateahsd
Comment Utility
Really good expert!
0

Featured Post

Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

Join & Write a Comment

Use email signature images to promote corporate certifications and industry awards.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Microsoft Office Picture Manager has a Picture Shortcuts pane that shows a list with the Recently Browsed folders. While creating my video Micro Tutorial here at Experts Exchange showing How to Install Microsoft Office Picture Manager in Office 2013…
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now