We help IT Professionals succeed at work.

On-Prem and Office 365 GALs are different

59 Views
Last Modified: 2018-12-20
Hi everyone.

We're in a hybrid setup with Exchange 2013 and Ofice 365.

Our issue is that some users with a mailbox in Office 365 cannot send to some users with mailbox on the on-prem Exchange 2013.
I've narrowed it down to the GALs, where the primarysmtp fields are different for the same user.

On-prem GAL entry:
smtp:user.name@company.com
smtp:user.name@company.dk
SMTP:user.name@dept-company.com
smtp:initials@company.dk
smtp:initals@dept-company.com
x500:/0=ExchangeLabns/.... etc

Office 365 GAL entry:
SIP:intials@company.com
SMTP.initials@company.com
SPO:SPO_436334 etc
x500:/o=COMPANY/ou=Exchange Administrative Group [FYDI.... etc
smtp:user.name@company.copm
smtp:initials@company.onmicrosoft.com

The MAIN culprit here is of course that the user's Primary SMTP address, listed in the Office 365 GAL, does not exist on the user's mail account at all.

But why are those two GAL's different? Is that by design? Links and/or helpful answers are much appreciated.

Thanks,

Bjorn Dirchsen
Comment
Watch Question

CERTIFIED EXPERT
Most Valuable Expert 2015
Distinguished Expert 2019

Commented:
If you have made changes directly in O365, those are in general not written back to AD. This is indeed by design, there are very few attributes that are written back to on-premises and only in specific situations. ProxyAddresses is one of those attributes (if you have the "Hybrid" option in AAD Connect enabled), so I'm not sure what went wrong in your case. But it's always required to make any changes in AD, then rely on dirsync to replicate them in O365.

In this specific scenario, you can just add the additional alias on-prem and be done with it.
Shreedhar EtteTechnical Manager
CERTIFIED EXPERT
Top Expert 2010

Commented:
Is domain dept-company.com is added to Office 365 Domains?
Joergen LindSysAdm

Author

Commented:
@Vasil Michev. We ONLY make changes to users from the on-prem AD/Exchange since only few changes are written back from Office 365.  SO we can rule this out. Ok, I can add the nescessary attributes, but since these users are test-users i would like this to work before I migrate the remaining 100 users :)

Thanks, Bjorn
Joergen LindSysAdm

Author

Commented:
@Shreedhar Ette. No, dept-company.com is not added to the Office 365 domains. Could that be the reason?
Technical Manager
CERTIFIED EXPERT
Top Expert 2010
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
CERTIFIED EXPERT
Most Valuable Expert 2015
Distinguished Expert 2019

Commented:
Oh, good catch Shreedhar, I totally missed that. And it seems I also misinterpreted the addresses, assuming the O365 ones are the on-premises ones... Guess I should drink some more coffee :)

So yeah, Bjorn, you need to add/verify any domains you have associated with email addresses and any other attributes. Otherwise they will either be replaced with the @tenant.onmicrosoft.com domain or dropped altogether.
Joergen LindSysAdm

Author

Commented:
Cool. I'll jump to it right away and update with my findings.

Thanks a lot guys!

Br, Bjorn
Joergen LindSysAdm

Author

Commented:
It worked! Adding dept-company.com to the list of Domains (and waiting for the GAL to be updated at 5am)  solved it.

The attributes of the user in the O365 GAL are now:

Office 365 GAL entry:
SIP:intials@company.com
SMTP:user.name@dept-company.com   <-- New!
SPO:SPO_436334 etc
x500:/o=COMPANY/ou=Exchange Administrative Group [FYDI.... etc
smtp:user.name@company.com
smtp:initials@dept-company.com   <--- New!
smtp:initials@company.onmicrosoft.com

Thanks to Shreedhar for spotting the culprit right away!

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.