Solved

Remove last exchange 2010 server after migration to office 365

Posted on 2014-11-11
16
4,205 Views
Last Modified: 2014-12-01
I moved all of our users to Office 365.
I have no AD sync running....so everything is separated.

I now want to decommission the last exchange 2010 server. It is sitting idle, and is to be repurposed.
It is a 2008R2 server with Exchange 2010 SP3

First question: Can someone tell me step by step how to do so?
Second question: Will this delete AD accounts? ( I do NOT want to do that)

thanks in advance
0
Comment
Question by:SeaSenor
  • 8
  • 8
16 Comments
 
LVL 32

Expert Comment

by:it_saige
ID: 40435914
Should just be a simple matter of uninstalling Exchange 2010.  This will not delete AD accounts.

-saige-
0
 
LVL 8

Assisted Solution

by:SeaSenor
SeaSenor earned 0 total points
ID: 40435947
Thanks.... but it is still sitting there running.
surely there are more steps involved that just clicking uninstall.

In my limited experience, Microsoft is never a "simple matter" of anything  :)
0
 
LVL 32

Expert Comment

by:it_saige
ID: 40435989
Microsoft is never a "simple matter" of anything  :)
True...  But it starts with the uninstall.  If you have any issues with the uninstall then we can work on those till Exchange is removed.  The uninstall will take care of the removal of Exchange specific AD entries.

-saige-
0
 
LVL 8

Author Comment

by:SeaSenor
ID: 40435995
entries such as what besides email address?

Also, I know that i'll need to remove arbitration mailbox etc., before the uninstall but was looking for specific steps to do so.
Do I not need to dismount the database or anything?
0
 
LVL 32

Expert Comment

by:it_saige
ID: 40436015
entries such as what besides email address?
Entries such as Microsoft Exchange Security Groups, Microsoft Exchange System Objects, Microsoft Exchange, Microsoft Exchange Autodiscover, etc.

As for your question on the Arbitration Mailboxes, this blog discusses removing those as well as Exchange:

http://www.hemangshah.com/?p=140

-saige-
0
 
LVL 8

Author Comment

by:SeaSenor
ID: 40436032
so if I have mail enabled security groups in AD for example, will it delete those groups, or just the email address associated with them?

and isn't removing the "last" exchange server different than just removing one from a group of them?

Also, pardon my paranoia. We have no testing or lab environment so everything is real time... and I need to be absolutely certain that it won't delete any AD groups or users.
0
 
LVL 32

Assisted Solution

by:it_saige
it_saige earned 500 total points
ID: 40436064
Any groups that you have created will remain.  Any groups or AD entities that Exchange creates, those will be removed.  The groups that Exchange creates are:

Exchange All Hosted Organizations
Exchange Servers
Exchange Trusted Subsystem
Exchange Windows Permissions
ExchangeLegacyInterop

For more detail into what is going to happen, here is a blog entry on manually removing Exchange (gives you a look behind the scenes as to what the Uninstall will do):

http://windowsitpro.com/exchange-server/how-uninstall-stubborn-exchange-server

This entry on spiceworks provides a high level manual uninstall:

http://community.spiceworks.com/how_to/show/16764-manually-uninstall-exchange-2010

And here is the Exchange 2010 Security Guide that contains more in-depth information:

http://technet.microsoft.com/en-us/library/bb691338(v=exchg.141).aspx

And don't worry about your paranoia level.  It is natural.  As they say in construction: Measure twice and cut once, but before you cut, measure once more.  ;)

-saige-
1
 
LVL 8

Assisted Solution

by:SeaSenor
SeaSenor earned 0 total points
ID: 40436208
ok.. two things.
One, the arbitration or system mailboxes still won't let me remove them. they are "in use" by exchange.
two, I'm still a little uneasy that if uninstalling exchange removes the mailboxes it will delete the users in AD.
That is what it does if you remove  the mailbox right?
1
 
LVL 32

Expert Comment

by:it_saige
ID: 40436216
No, removing the mailbox does nothing to the active directory user, they are two separate entities.

As for the arbitration mailboxes, try running this CommandLet in the Exchange Management Shell:
Get-Mailbox -Arbitration -Database db1 | Remove-Mailbox -Arbitration -RemoveLastArbitrationMailboxAllowed

Open in new window


-saige-
0
 
LVL 8

Accepted Solution

by:
SeaSenor earned 0 total points
ID: 40436226
if I remove the mailbox it deletes the user completely from active directory. Done it both on purpose many times, and by accident on one occasion.
I can disable the mailbox, and it will remove the email address entry from the AD user properties.

And yes, that is the command I am using in exchange powershell. It errors, and says it's in use.
0
 
LVL 32

Assisted Solution

by:it_saige
it_saige earned 500 total points
ID: 40436255
Well, here is the gist of where we are, if you try to remove Exchange and there are still active mailboxes on it, then the removal won't complete.  If there are no active mailboxes, then the removal continues without a hitch.  Ultimately, though, the removal of Exchange does not touch your Active Directory users.  We as the admins make the determination as to whether a user account and/or mailbox are removed.

Mailboxes that are disabled are removed without touching the Active Directory user as well.

Ok.  Let's try disabling the Arbitration Mailbox instead:

Get-Mailbox –Arbitration | Disable-Mailbox –Arbitration –DisableLastArbitrationMailboxAllowed

Open in new window


Then try to uninstall Exchange.

-saige-
0
 
LVL 8

Author Comment

by:SeaSenor
ID: 40436261
I disabled it just prior to the post...  no error.
then tried to remove it, and nothing happened.
Tried to run the get-mailbox and nothing shows up now.

As far as active mailboxes, yes. As mentioned it's just sitting there running as an exchange server (with all mailboxes).
They don't connect to it though. They connect to office 365 now.
So how to get rid of mailboxes or database without removing AD users?
0
 
LVL 32

Assisted Solution

by:it_saige
it_saige earned 500 total points
ID: 40436273
Sorry I either missed the part where you stated that the users still had mailboxes or didn't catch your hints correctly (not enough coffee I guess and it's almost quitting time, that doesn't bode well for me ;) )  I guess I just assumed that since they were moved to Office365, that you had migrated them to the Office365 server.  :(

To disable all the mailboxes on the server:
Get-Mailbox -Server 'servername' | Disable-Mailbox

Open in new window


-saige-
0
 
LVL 8

Author Comment

by:SeaSenor
ID: 40437530
good morning,
yes they were migrated, (which doesn't move the mailbox, just copies it)  then I shut down the exchange server for a while, making sure it was a successful migration. Now it's up and running just sitting there waiting for everything to be uninstalled.

Before I continue, I'd like to ask another question.

Let's say I decide to run dirsync in a few weeks.  
I have disabled all the mailboxes, effectively removing all exchange attributes from AD users/groups.
What happens if directory syncs users? Does it remove their email?
0
 
LVL 32

Assisted Solution

by:it_saige
it_saige earned 500 total points
ID: 40437658
The DirSync tool allows you to synchronize your Active Directory database with Office365.  DirSync does not affect Exchange mailboxes.  However, if any of your current settings on Office365 depend on certain Exchange attributes (and it is possible that they may) then those changes will be reflected when you run a directory sync (things like SMTP Address, Email Address, etc.).

Couple of links I found for you that give discussions on this:

http://blogs.technet.com/b/exchange/archive/2012/12/05/decommissioning-your-exchange-2010-servers-in-a-hybrid-deployment.aspx

https://social.technet.microsoft.com/Forums/windowsserver/en-US/15216444-f3a8-4778-80c5-fcb9808fb6ed/uninstall-last-exchange-2010-server-after-migration-to-office-365?forum=exchange2010

Specifically this post:
So we used a powershell script to list all the mail-attributes we needed to maintain in AD to sync with Dirsync: Primary SMTP address, e-mail address,...

Then we disconnected and purged the mailboxes on the on-premises exchange server and added the mail-attributes to the AD-account via the attribute editor in Active Directory Users and Computers, this for 80 user accounts.

We let dirsync sync a few times and when everything looked fine, we perfomed the uninstall of our on-premises 2010 exchange server.

This post:

http://community.office365.com/en-us/f/613/t/276274.aspx

Alludes to a potential problem if you have DirSync installed in Hybrid mode, just an FYI.

-saige-
1
 
LVL 8

Author Closing Comment

by:SeaSenor
ID: 40473301
It's hard to say this was excellent... I would have deleted all users had I not guided myself, and would like others who view this to make sure they see that.

but thanks for the help otherwise.
0

Join & Write a Comment

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now