Solved

Solving the X-500 Issue with inter-tenancy migration of Office365.

Posted on 2014-10-15
7
744 Views
Last Modified: 2014-11-05
We are migrating a number of domains from one tenancy to another within Office 365.
Tenancy 1 has 18 domains and we cannot migrate all at once.

One major issue we have hit migrating from  T1 (Tenancy 1) to T2 (Tenancy 2) is NDR's.
If you migrate a user to T2 and they reply to a mail of a user on T1 they get an NDR.
This appears to be because of the use of X500 (not smtp) to relay mail.
The user can send a new mail OK (they search GAL for user and see a contact for user on T1 which relays mail across)
However any reply to a mail pre-migration produces a NDR as it uses X-500 which will not work in T2.

Is there any way to avoid this issue ?

Cheers..

p.
0
Comment
Question by:paologiorgio
  • 4
  • 3
7 Comments
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
ID: 40382214
In theory, all you need to do is add the LegacyDN value for the old tenant object as X500 alias for the new object. In practice, never done this for migration between two O365 tenants, so cannot guarantee it will work. Give it a try and report back? :)
0
 

Author Comment

by:paologiorgio
ID: 40382932
Hi Vasil (you are being a great help on this project by the way !!!)

To Confirm Scenario:

Dave is user who migrated to T2
Dave migrated to T2 Today

Mary is user who is still on T1

What's happening now:
Dave sent Mary a mail yesterday.
Both were on T1.
Dave has been migrated to T2 today.
Today Mary Replies to Dave's Mail.
She Get's A NDR as O365 uses X-500 to reply but that is longer active as Dave has migrated.

What you are suggesting will fix issue:
Add X-500 to Dave's T2 Account
Mary replies to mail Dave sent yesterday.
Mail get's delivered to new tenancy as that's where relevant X-500 is.


Is this what you are suggesting ?

Paul.
0
 
LVL 38

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 40383028
Yup, let Dave be the test bunny, should work in theory.

If it works OK, it will be best to adjust your migration steps to create the new X500 alias immediately after creating the mailbox in the new tenant.
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 

Author Comment

by:paologiorgio
ID: 40386984
Vasil,

I need to add the x500 via powershell but not sure if i have my script correct (the last one).  

Syntax i have is....

$User= Get-Mailbox  $User.EmailAddresses+="X500: /O=ORG /OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=XX" Set-Mailbox  –EmailAddresses $User.EmailAddresses

Open in new window


Example i have is....

$User=Get-Mailbox John $User.EmailAddresses+="X500:/O=ORG /OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=XX"  Set-Mailbox John –EmailAddresses $User.EmailAddresses

Open in new window


What i am using is....

$User=Get-Mailbox aherbert@healthcare.ie $User.EmailAddresses+="X500:/o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=c858c94b45794aee8894aeab18339b48-aherbert"  Set-Mailbox aherbert@healthcare.ie –EmailAddresses $User.EmailAddresses

Open in new window

0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
ID: 40387018
It's correct, just make sure those are new lines or put ";" in between them. And of course, always test with a single user first :)
0
 

Author Comment

by:paologiorgio
ID: 40395082
Vasil, because dirsync is in use, it won't let me add X500 via powershell and it says i need to change via on-premise AD.

This is something i wanted to avoid as i don't have complete access to AD and need to go through someone to get to it.

However I have made changes on-premise using ADSIEDIT (as its windows 2003) but it's not showing up on Office365 even after force sync. Any ideas as to why this may be the case ?
0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
ID: 40395327
Syncing X500 addresses should not be a problem. Check in the MIISClient if the attribute change is actually picked up by the dirsync process? Also check for any errors with the sync, etc.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Companies keep a much closer eye on costs today, so changing to new Technology – Microsoft Office 365 is the smartest move to take.
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
In a previous video Micro Tutorial here at Experts Exchange (http://www.experts-exchange.com/videos/1358/How-to-get-a-free-trial-of-Office-365-with-the-Office-2016-desktop-applications.html), I explained how to get a free, one-month trial of Office …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now