This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 7.000000000000001%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
We have an on-premises mailbox (user account) that allows our users to send emails that they think are suspicious. The account logs into a non-domain workstation using OWA. Our users are in exchange online. we are hybrid. Management wants to know if this mailbox can be moved to exchange online and what do we have to consider. We still want to use the non-domain workstation for the account logon. How do I configure this account in exchange online? Anything special because of its' use. Someone mentioned conditional access and 2 factor authentication will need to be configured for this account. (details not given). Any suggestions? I appreciate your help. Thanks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi，
Based on your description, in the hybrid deployment environment, for the user mailbox, we can move it to Exchange Online.
After migration, this users need to log in to M365 OWA using non-domain workstation. For the specific operation process, you can refer to this URL：
https://learn.microsoft.com/en-us/exchange/hybrid-deployment/move-mailboxes
https://learn.microsoft.com/en-us/exchange/hybrid-deployment/simplify-owa-url
“We have an on-premises mailbox (user account) that allows our users to send emails that they think are suspicious.”. did you mean that other Exchange Online users send suspicious emails to this mailbox? How did you configure this mailbox? Or what special features do you want to enable for this mailbox?
The account is a standard user that uses OWA on a sandbox pc. The exchange online users forward suspicious emails to the mailbox. The emails are analyzed on the sandbox. If we move it to the cloud, the following was mentioned: separate conditional access policy (don't know what that looks like), 2 factor authentication, limit account to specific IP address. OWA will be enabled. Our security is questioning if we should move to the cloud or leave on prem.
Thank you.
“eparate conditional access policy (don't know what that looks like), 2 factor authentication, limit account to specific IP address. OWA will be enabled. "Is this what the system prompts during the migration process?
In a hybrid deployment environment, mailboxes are straightforward and can be migrated.
I personally would put it in EXO and use the EDR solution for analysis.