[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

After Recent AD Sync to Azure, Cannot Manage Exchange Online Accounts

Posted on 2016-07-22
2
Medium Priority
?
730 Views
Last Modified: 2016-07-25
We just recently sync'ed our AD domain with Exchange Online. Our Exchange had been migrated over a year ago and we have no on-premise Exchange any longer. In the portal, I tried to set a primary SMTP address, and received this error:

The operation on mailbox "John Smith" failed because it's out of the current user's write scope. The action 'Set-Mailbox', 'EmailAddresses', can't be performed on the object 'John Smith' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization.

Our DC's Windows Powershell doesn't support that command. I'd have been surprised if it did.

This is probably relevant- we performed the Sync by changing UPN's on user accounts. The sync works like a charm. But we need to be able to manage accounts.
0
Comment
Question by:jconklin-ansinc-net
2 Comments
 
LVL 45

Accepted Solution

by:
Vasil Michev (MVP) earned 2000 total points
ID: 41725570
That's the whole idea of the sync - you transfer the source of authority to you on-prem AD and any changes in objects and their attributes should be done on-prem. That's also the reason why the only supported configuration is by having an Exchange server on-prem. If you dont have such server, you can still edit the attributes via ADUC/ADSI Edit/PowerShell, however you will be in unsupported scenario.

If you're only concerned about the primary SMTP address, there's a workaround. You can use the following cmdlet to change it directly in the cloud:

Set-Mailbox user@domain.com -WindowsEmailAddress new@domain.com

Open in new window


This cmdlet will add new@domain.com as the primary SMTP, while preserving user@domain.com as a secondary alias. It will work regardless of the object's sync status.
0
 

Author Closing Comment

by:jconklin-ansinc-net
ID: 41727583
The Powershell command worked. Thanks!
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Upgrading from older Exchange server to the latest Exchange server can be tiresome, error-prone and risky, without being a seasoned exchange server administrators. It can become even problematic if you're an organization that runs on tight timeline…
After a recent Outlook migration from a 2007 to 2010 environment, some issues with Distribution List owners were realized. In this article, I explain how that was rectified.
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses

640 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question