Migrating exchange, sharepoint and skype to Office 365 (Hybrid)

Eromonsele Eboiyehi
Eromonsele Eboiyehi used Ask the Experts™
on
i want to set up my DNS in office 365 exchange online migration setup. I want external emails to be routed through my on Premise exchange server before going to office 365. Please advice, Do i need to change my MX records as it was directed during the migration assistant. I attached the  picture below of my confusion. Please advice on what best option to choose.
exch365.PNG
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
timgreen7077Exchange Engineer
Distinguished Expert 2018

Commented:
No if you want your mail to continue to be routed to your on-prem exchange server, then no don't change the MX record. Leave it pointing your inbound exchange or firewall or whatever you have it pointing to currently. once it hits your exchange, your exchange will know where the mailbox is and route it to O365 if that is where the mailbox resides.
Server engineer
Commented:
When in hybrid, you may leave the mx onpremise and once you have migrated everything you can change the mx record.

When you move a mailbox from onpremise to O365 the target address in stamped with the onmicrosoft hybrid domain which is set in the accepted domain when you ran the hybrid setup. So when an external email is sent to this mailbox which is now moved to O365 and mx pointing to onpremise.

The mail will first come to onpremise since MX is pointed there and when it does not finds the user in onpremise it will query the user AD object and looking at the target address with onmicrosoft domain it will send the mail to O365 mailbox. This is how you mail flow will work in hybrid setup.

Also make a note when in hybrid setup make sure to include SPF Record with “include:spf.protection.outlook.com” value after completing Hybrid Configuration Wizard.

Example:
If customer has below mentioned SPF Record before running Hybrid Configuration Wizard:

v=spf1 a mx a: ip4: 12.145.11.133 include:_spf.xyz.com -all

then after running Hybrid Configuration Wizard SPF Record should be updated to:

v=spf1 a mx a: ip4: 12.145.11.133 include:spf.protection.outlook.com include: _spf.xyz.com -all
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
so do i just have to only update the CNAME record and the TXT record? My txt looks different. it looked like this
 v=spf1 +a +mx +ip4:69.90.162.250~all
I updated it to :  v=spf1 +a +mx +ip4:69.90.162.250 include:spf.protection.outlook.com ~all
but i am still unable to perform any test migration.
please help
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Jian An LimSolutions Architect
Top Expert 2016

Commented:
there is a few things you need to do
1. AADConnect
2. hybrid configuration wizard
3. do migration endpoint created?


these text record and MX record probably the least problem compare to the above
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
Now i have migrated two users into office 365, but the problem is that they are isolated from the network and now users randomly complain they cant receive external emails. Please helpp!!!
timgreen7077Exchange Engineer
Distinguished Expert 2018

Commented:
what do you mean isolated from the network. give details of issue.
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
so I migrated two users from my on premise network to office 365. both users smtp were updated to .ca from .local. Note that i have the remaining users on .local. i noticed both users cant send emails to other users in the domain. the email messages dont deliver. i only updated the .TXT  and CNAME records on my dns. my MX records still points to my exchange on prem not office 365.
timgreen7077Exchange Engineer
Distinguished Expert 2018

Commented:
First don't ever just migrate users, you should always use test accounts to make sure everything is working the way it should.
I would suggest migrating them back to your on-prem environment.

When you setup your hybrid and ran the hybrid configuration wizard, it would have created a send connector on-prem (on-prem to 365) so that on-prem users can email o365 users, and it would have created a connector in O365 (o365 to on-prem) so that your O365 users can email your on-prem users.

If these connectors wasn't created you may have setup the hybrid with minimal configurations when you should have used full configurations.
You can either re-run wizard and select full config or you can manually create the connectors, see below link for help.

https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
I set it up with Full configuration. Not minimal. Is is a requirement to have a routable AD domain? for my ad server?
timgreen7077Exchange Engineer
Distinguished Expert 2018

Commented:
Yes that is required when moving mailboxes from on-prem to O365, but not required when sending emails from O365 to on-prem, but yes you do have to have a routable email domain.
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
I have a  certificate on my exchange server. it was not listed as a requirement., i thought idfix resolved that?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial