Migrating exchange, sharepoint and skype to Office 365 (Hybrid)

i want to set up my DNS in office 365 exchange online migration setup. I want external emails to be routed through my on Premise exchange server before going to office 365. Please advice, Do i need to change my MX records as it was directed during the migration assistant. I attached the  picture below of my confusion. Please advice on what best option to choose.
Eromonsele EboiyehiNetwork Support AnalystAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

timgreen7077Exchange EngineerCommented:
No if you want your mail to continue to be routed to your on-prem exchange server, then no don't change the MX record. Leave it pointing your inbound exchange or firewall or whatever you have it pointing to currently. once it hits your exchange, your exchange will know where the mailbox is and route it to O365 if that is where the mailbox resides.
Saif ShaikhServer engineer Commented:
When in hybrid, you may leave the mx onpremise and once you have migrated everything you can change the mx record.

When you move a mailbox from onpremise to O365 the target address in stamped with the onmicrosoft hybrid domain which is set in the accepted domain when you ran the hybrid setup. So when an external email is sent to this mailbox which is now moved to O365 and mx pointing to onpremise.

The mail will first come to onpremise since MX is pointed there and when it does not finds the user in onpremise it will query the user AD object and looking at the target address with onmicrosoft domain it will send the mail to O365 mailbox. This is how you mail flow will work in hybrid setup.

Also make a note when in hybrid setup make sure to include SPF Record with “include:spf.protection.outlook.com” value after completing Hybrid Configuration Wizard.

If customer has below mentioned SPF Record before running Hybrid Configuration Wizard:

v=spf1 a mx a: ip4: include:_spf.xyz.com -all

then after running Hybrid Configuration Wizard SPF Record should be updated to:

v=spf1 a mx a: ip4: include:spf.protection.outlook.com include: _spf.xyz.com -all

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Eromonsele EboiyehiNetwork Support AnalystAuthor Commented:
so do i just have to only update the CNAME record and the TXT record? My txt looks different. it looked like this
 v=spf1 +a +mx +ip4:
I updated it to :  v=spf1 +a +mx +ip4: include:spf.protection.outlook.com ~all
but i am still unable to perform any test migration.
please help
CEOs need to know what they should worry about

Nearly every week during the past few years has featured a headline about the latest data breach, malware attack, ransomware demand, or unrecoverable corporate data loss. Those stories are frequently followed by news that the CEOs at those companies were forced to resign.

Jian An LimSolutions ArchitectCommented:
there is a few things you need to do
1. AADConnect
2. hybrid configuration wizard
3. do migration endpoint created?

these text record and MX record probably the least problem compare to the above
Eromonsele EboiyehiNetwork Support AnalystAuthor Commented:
Now i have migrated two users into office 365, but the problem is that they are isolated from the network and now users randomly complain they cant receive external emails. Please helpp!!!
timgreen7077Exchange EngineerCommented:
what do you mean isolated from the network. give details of issue.
Eromonsele EboiyehiNetwork Support AnalystAuthor Commented:
so I migrated two users from my on premise network to office 365. both users smtp were updated to .ca from .local. Note that i have the remaining users on .local. i noticed both users cant send emails to other users in the domain. the email messages dont deliver. i only updated the .TXT  and CNAME records on my dns. my MX records still points to my exchange on prem not office 365.
timgreen7077Exchange EngineerCommented:
First don't ever just migrate users, you should always use test accounts to make sure everything is working the way it should.
I would suggest migrating them back to your on-prem environment.

When you setup your hybrid and ran the hybrid configuration wizard, it would have created a send connector on-prem (on-prem to 365) so that on-prem users can email o365 users, and it would have created a connector in O365 (o365 to on-prem) so that your O365 users can email your on-prem users.

If these connectors wasn't created you may have setup the hybrid with minimal configurations when you should have used full configurations.
You can either re-run wizard and select full config or you can manually create the connectors, see below link for help.

Eromonsele EboiyehiNetwork Support AnalystAuthor Commented:
I set it up with Full configuration. Not minimal. Is is a requirement to have a routable AD domain? for my ad server?
timgreen7077Exchange EngineerCommented:
Yes that is required when moving mailboxes from on-prem to O365, but not required when sending emails from O365 to on-prem, but yes you do have to have a routable email domain.
Eromonsele EboiyehiNetwork Support AnalystAuthor Commented:
I have a  certificate on my exchange server. it was not listed as a requirement., i thought idfix resolved that?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Office

From novice to tech pro — start learning today.