Link to home
Start Free TrialLog in
Avatar of HornAlum
HornAlumFlag for United States of America

asked on

Exchange Online Protection transition from Forefront Online Protection for Exchange

Anyone here use Forefront Online Protection for Exchange (FOPE) and have your services transitioned over to Exchange Online Protection? The process is confusing, because Exchange Online Protection doesn't seem to show the distribution groups from the organization whereas FOPE used to show these. I've already installed the Azure Directory Sync Tool.

Under recipients in the Exchange Admin Center, all I see are "Users" and "Contacts". Nothing for distribution groups.

I called into their support but got a guy with a thick accent and probably overseas as there seemed to be a delay where he could hear me. I couldn't make much sense of what he was telling me and i don't think he understood what I was trying to relay to him. He seemed to relay that they are aware of the distribution groups on the back end but they won't show on EAC.

I don't want to switch over my MX records until I'm sure that EOP can handle emails to the distribution groups. help!
Avatar of Shabarinath TR
Shabarinath TR
Flag of India image

We have a similar infrastructure but using Hybrid setup. We have FOPE as part of the O365 Subscription however, yet to start the mail routing through FOPE.

Could you please let me know if you are doing a full sync or partial sync from On-Premise to cloud? I have done a partial sync based on a custom attribute and I could see the groups which I have set the value correctly to be synced.

Cheers !
Avatar of HornAlum

ASKER

we are doing a full sync i believe. Partial sync was not an option in the azure tool
ASKER CERTIFIED SOLUTION
Avatar of Svet Paperov
Svet Paperov
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I completely agree. And I found the same things.

That's way I decided not to use Dir Synch.

In FOPE, Dir Synch was very useful because of Directory blocking but since there is no Directory blocking in EOP yet, and the end-user cannot logon to his Quarantine.. again yet, I don't see way should I complicate my life with this synch.

It's "wait and see" for me.
I can't see not using DirSync right now though, because there's no way i want to manage accounts/groups in two separate places.
I too have been forced into the transition and DIrSync does not sync mail-enabled public folders at all.
1. My distrib groups got synced, including some that used to be internal-only !  So they do show up for me using DirSync.  Where are they in your AD tree ?  (mine were below our OrgUnit)

2. DirectoryEdge blocking is on for us (maybe cause MS did much of the migration automatically) and working.....  But this BLOCKED our main  mail@xyz.com as this an email address is to a public folder named ReceptionMail.  And unless you look hard, I didnt realise that PF's were not synced like they were with the FOPE sync tool.

There is a script floating around that creates contacts for each mail-enabled public folder and these should sync but no luck for me.


3. @HornAlum.. I cant workout how you saw the groups ....
i was able to find the location where the groups were stored