Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Dirsync setup

Posted on 2013-11-04
13
Medium Priority
?
1,021 Views
Last Modified: 2013-11-06
Hi,
We have a Server 2003 domain running Exchange 2003, I also have a server 2008 r2 member server. We have purchased an Office 365 subscription to replace the in-house Exchange.
I have been reading up on dirsync and want to use it to keep the domain and O365 login details in sync. My questions are:
1. can i install dirsync and use it to populate the O365 environment with all the users in advance of the cut over to O365 for email delivery, i.e with internal Exchange still running?
2. i know i have to create an OU in AD to put all the existing AD users in that will have O365 accounts, do I also need to add a UPN name in AD, is this the 'user logon name (pre windows 2000)' if so does this name need to be the same as the email address in O365?
Thanks
Andrew
0
Comment
Question by:activateahsd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 6
13 Comments
 
LVL 43

Expert Comment

by:Vasil Michev (MVP)
ID: 39621418
1) If you are going for cutover migration, you dont need dirsync. It will not allow you to actually perform this if you have dirsync running. Don't worry about the details, the migration process will connect to the on-prem server and get everything from the GAL (apart from hidden objects). You can run dirsync after the migration is over.

2) If you are going to use a custom domain with Office 365, make sure you add this domain as UPN suffix in your AD. Then, change the UPNs of every user you are going to migrate to the cloud to match the new UPN suffix. The UPN and primary email address do not need to match.

Here is the article on cutover migration just in case:

http://help.outlook.com/en-us/140/Ff628719.aspx

Compare different types of migration:

http://help.outlook.com/en-us/140/538c48ad-4a3d-4777-be1b-7fc533ca45eb#migrationmatrix
0
 

Author Comment

by:activateahsd
ID: 39621475
Hi, Thanks for the info, really useful.
I think I have got my terminology wrong, as per the microsoft definition I am not doing a 'cut-over' migration. There are only 22 users and they want blank new mailboxes with historical email only available as a locally storted pst file.
So I think what I need to do is manually create the 22 users in O365, then alter the MX records so email starts flowing via O365 rather than internal Exchange. At that point I guess I need to amend the users AD logins to be the new UPN which matches their O365 login (and their primary email address). Once that it done I can install dirsync to keep AD password changes in sync with O365 credentials.
Have I understood it right?
Thanks
Andrew
0
 
LVL 43

Expert Comment

by:Vasil Michev (MVP)
ID: 39621493
Go with staged migration instead, you can have dirsync running from the start with it:

http://help.outlook.com/en-us/140/ff959224.aspx

You will need a valid CA certificate for Outlook Anywhere, if you don't have such you can get one for free from comodo or startssl.com.

Doing things manually will also work, but will probably get you into more issues. Just update the UPNs first, set up dirsync and proceed with the migration. Once you read the articles it's not that complicated :)
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:activateahsd
ID: 39624161
Hi - they dont want to import anything to the new mailboxes. Can I install dirsync after everything is up and running just to keep password changes synced?
0
 
LVL 43

Expert Comment

by:Vasil Michev (MVP)
ID: 39624278
OK, the idea behind all those methods is to migrate not only the account (and their corresponding attributes), but also the mailbox data associated with them. If you are NOT going to migrate any mail, all you need is dirsync.

Sorry if I have misunderstood you :)

Just to make sure you have displayName set for any groups you want to migrate, otherwise the dirsync process will just skip them.
0
 

Author Comment

by:activateahsd
ID: 39624793
Hi, your being very helpful thank you.
Sorry if I am asking dumb questions, I have moved all my required users into a new OU in AD in preparation, when you mention displayname are you talking about the users 'simple display name' in Exchange?
0
 
LVL 43

Expert Comment

by:Vasil Michev (MVP)
ID: 39624873
No, the actual displayName attribute.
0
 

Author Comment

by:activateahsd
ID: 39624912
sorry but where do i find that?
thanks.
0
 
LVL 43

Expert Comment

by:Vasil Michev (MVP)
ID: 39624974
Oh, 2003 domain? Use adsiedit.msc :)

Couldn't find a nice guide with screenshots and all, so here's a link to a similar question on EE: http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_27462346.html
0
 

Author Comment

by:activateahsd
ID: 39625018
of course, thanks!
So its the OU group I have to set the displayName attribute on? Does it have to be anything in particular?
Thanks.
0
 
LVL 43

Accepted Solution

by:
Vasil Michev (MVP) earned 2000 total points
ID: 39625053
No, no. This is for group objects, such as mail enabled security groups/distribution groups. The default dirsync filters will exclude any such objects that don't have displayName set. So if you want to migrate them as well, make sure the attribute is populated.

If you plan to create them manually or don't want to copy them to the cloud, ignore this.
0
 

Author Comment

by:activateahsd
ID: 39626663
OK thanks for all your help, really useful knowledge for my first O365 setup!
cheers
Andrew
0
 

Author Closing Comment

by:activateahsd
ID: 39626664
Really good expert!
0

Featured Post

Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cloud-based technologies and services will continue to grow in popularity in 2017 thanks to the simple, scalable and cost-effective solutions they deliver. Here are three areas where cloud adoption is poised to really take off.
As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question