Exchange Attributes after re-attaching EXO mailbox to a new account in another forest

Khamatee Brown 21 Reputation points
2022-09-28T12:21:05.543+00:00

Here is the scenario:

Parent Office 365 tenant with Azure AD connect

Child Domain with their own AD and Exchange On-premises server. Network connectivity between parent Azure AD Connect and child AD to setup hybrid and sync AD object to parent tenant.

Mailboxes were migrated to parent office 365 tenant.

The customer would like to now have AD account from child domain created on parent AD on premises server, disconnect mailboxes from child AD on premises account and re-connect to newly created AD accounts on parent domain.

The parent company's local AD scheme is prepped for Exchange but I'm concerned about the Exchange attributes that are from the child domain Exchange server will not be present in the parent domain and mailboxes will loose required attributes. Also, currently, mailboxes on child Exchange on-premises server are now remote mailboxes. Would be the state of these when the account will no longer be connected to the parent tenant?

I have the process to disconnect mailbox from child AD account and reconnect to new account in parent AD.

  • Create new account on parent AD but keep in non sync OU
  • Get ImmutableID of new account
  • Move old account from child domain to non-sync OU
  • Restore old account from child domain on Office 365 and it changes from synced to Cloud
  • Set ImmutableID of new account with old account - Set-MsolUser -UserPrincipalName * Email address is removed for privacy * -ImmutableId "EFSIjTMY5ESyJb8zHLXxqA=="
  • Add aliases to merge
  • Move child domain new account account from perent AD non sync OU to Synced OU
  • verify mailbox is attached (at this point I'm concerned about the Exchange attribute and what to expect with the remote mailbox on the child Exchange on premises server)
Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,188 questions
{count} votes

Accepted answer
  1. KyleXu-MSFT 26,396 Reputation points
    2022-09-29T01:43:09.307+00:00

    @Khamatee Brown

    You could follow this Scenario one to let mailboxes hosted on Exchange online. Remove the hybrid configuration between child domain and Exchange online.

    Then sync AAD accounts from Azure AD back to Parent AD: How to Sync an Existing Office365 Tenant into a New Active Directory Domain
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Khamatee Brown 21 Reputation points
    2022-09-29T12:21:53.32+00:00

    @KyleXu-MSFT thank you for your response. The AD accounts are currently residing on the child domain but synced to tenant via Azure AD connect.

    We want to have the accounts re-created on parent AD, reconfigure sync to now sync newly created accounts on parent AD and then ensure the mailboxes are now connected to the newly created accounts.

    Hope this clears it up


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.