Hybrid Exchange: Mailbox in cloud, but not On-Prem

 In an Exchange Hybrid Environment, you can run into an issue where an On-Prem AD account is assigned an o365 license and  creates a Cloud mailbox before its migrated. This will leave you in a situation where there is a mailbox in the cloud and no mailbox On-Prem.

Fixing this is very easy: All you need to do is run this command in your On-Prem instance

Enable-RemoteMailbox "user identity" -RemoteRoutingAddress "user@contoso.mail.onmicrosoft.com"

That's It! Told you it was easy.


Reference: How to recover when a mailbox exists in both Exchange Online and on-premises - Exchange | Microsoft Learn

Comments

Post a Comment

Popular posts from this blog

Create Profiles for Managing Microsoft Exchange using Windows Terminal (Online and On-Prem)

Image
I use Windows Terminal a lot and I wanted to show off how I setup Exchange Management profiles to make my life easier. Enjoy! Exchange Online: In Windows Terminal, go to "Settings" and click "Add a new profile" at the bottom. Give it a name you like, and in the "Command line" field, Paste the following: powershell.exe -NoExit -Command "Import-Module ExchangeOnlineManagement; Connect-ExchangeOnline -UserPrincipalName user@contoso.com"  Make sure to replace the UserPrincipalName property with your own. On-Prem Exchange: In Windows Terminal, go to "Settings" and click "Add a new profile" at the bottom. Give it a name you like, and in the "Command line" field, Paste the following: powershell.exe -NoExit -Command "$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://exchange.domain.com/powershell/; Import-PSSession $Session -DisableNameChecking"  Make sure to replace the Connecti...
Read more

Give a User 'SendAs' permssions to a Mail-Enabled AD Group in Exchange Online

Image
Really specific situation I know, but this took me an embarrassing amount of time to figure out. Thankfully, its pretty simple. Just use the 'RecipientPermission' cmdlets: Add-RecipientPermission -Identity GROUP -Trustee USERNAME -AccessRights SendAs Where GROUP is the 'samAccountName' or 'Primary Email' of the group you want to allow the user to send as and USERNAME is the 'samAccountName' of the user. You can also use the following to see who already has 'Send As' permissions for the group Get-RecipientPermission -Identity GROUP Example:
Read more

Get a User's Active Directory Groups

Problem: You need to list out a User's AD Groups quickly and in a way you can copy and paste them. Solution: So we can use the Get-ADUser cmlet with the "Properties" parameter specifying "Member Of" to get a list of AD Groups. The issue is the groups are formatted as distinguished names which are not very easy to read. PS C:\Users\jheisler> (Get-ADUser -Identity "jheisler" -Properties "MemberOf").MemberOf CN=ITTeam,OU=O365,DC=johnjheisler,DC=com CN=ACL-ITDevOps,OU=Security Groups,OU=Groups,DC=johnjheisler,DC=com Thankfully, All we need to do to overcome this is pipe the Get-ADUser cmdlet into a Get-ADGroup cmdlet. Then we can specify the "Name" property off the AD Group objects. PS C:\Users\jheisler> ((Get-ADUser -Identity "jheisler" -Properties "MemberOf").memberof | Get-ADGroup).Name ITTeam ACL_ITDevOps That's it. A quick and clean way to list a user's AD Groups. https://github.com/Snowstuff123/Po...
Read more