If you remove an HCW from the Exchange server, is it prohibited to do it again?

Camille Ross Ann Rudio 1

After removing the Hybrid Configuration Wizard (HCW) from the Exchange server, is it possible to reconfigure the HCW on the same Exchange server where the HCW setup was removed? FYI, the same Microsoft 365 tenant will be used.

Alex Zhang-MSFT 2,685 Reputation points Microsoft Vendor

2024-12-05T01:33:35.1266667+00:00

Hello, @Camille Ross Ann Rudio,

Just checking in to see if the information below was helpful.

If the issue has been resolved, please mark the helpful replies as answers. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

Best Wishes,

Alex Zhang
Alex Zhang-MSFT 2,685 Reputation points Microsoft Vendor

2024-12-09T02:52:56.46+00:00

Hello, @Camille Ross Ann Rudio,

If the answer is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Best Wishes,

Alex Zhang

1 answer

Alex Zhang-MSFT 2,685 Reputation points Microsoft Vendor

2024-11-28T02:23:33.62+00:00

Hello, @Camille Ross Ann Rudio,

Welcome to the Microsoft Q&A platform!

Yes, after removing the Hybrid Configuration Wizard (HCW) from an Exchange server, you can still reconfigure the HCW on the same Exchange server, even if you are using the same Microsoft 365 tenant. Here are the general steps to follow:

1.Download and Install HCW: You can download the HCW from the Exchange Admin Center or the Microsoft 365 Admin Center.

2.Run the HCW: Launch the HCW and sign in with your Microsoft 365 global administrator account.

3.Follow the prompts: The wizard will guide you through the necessary steps to re-establish the hybrid configuration. You will need to provide appropriate credentials for both your on-premises Exchange server and your Microsoft 365 tenant.

4.Verify and finalize: After the HCW completes, it will provide you with a summary of the configuration changes made. Verify that everything looks correct and finalize the setup.

If you encounter any issues or need detailed guidance, Microsoft's documentation on the Hybrid Configuration Wizard can be very helpful: https://learn.microsoft.com/en-us/exchange/hybrid-configuration-wizard.

One point you need to note is that, since you're using the same Microsoft 365 tenant, you won't need to reverify your domain ownership if the federation trust still exists and is valid. However, ensure that all prerequisites are met, such as having the necessary permissions and valid certificates. If you need to change the mail flow configuration, you will need to re-run the HCW and make the necessary adjustments.

In addition, a case study similar to your needs is provided for your reference: https://learn.microsoft.com/en-us/answers/questions/183403/re-running-reconfiguring-exchange-hcw，

If the answer is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Thank you for your support and understanding.

Best Wishes,

Alex Zhang
Please sign in to rate this answer.
Alex Zhang-MSFT 2,685 Reputation points Microsoft Vendor

2024-12-02T01:15:49.71+00:00

Hello, @Camille Ross Ann Rudio,

Just wanted to check if the answer shared below helped. If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang

Camille Ross Ann Rudio 1 Reputation point

2024-12-02T09:06:42.2033333+00:00

Thank you for the information.

In addition, I have additional question regarding our SSL certificate, we have an accepted domain which is "companyA.com" configured in our Exchange server on-premises and our EWS and Autodiscover has an FQDN of "webmail.companyA.com.ph".

"webmail.companyA.com.ph" is already added in our SSL certificate (as a subject and SAN of the certificate).

My question is, am I required to add companyA.com to the SSL certificate for configuring Hybrid setup?

Alex Zhang-MSFT 2,685 Reputation points Microsoft Vendor

2024-12-02T09:20:58.3833333+00:00

Hello, @Camille Ross Ann Rudio,

Thank you for your prompt reply.

As for your question, for a hybrid Exchange setup, your SSL certificate must cover all the necessary domains for external access to services such as EWS and auto-discovery. Since “webmail.companyA.com.ph” is already included in your certificate and used for these services, the following should also be considered:

1.Accepted Domain: If "companyA.com" is an accepted domain in your Exchange environment, it is generally a good practice to include it in your SSL certificate. This ensures that any services or endpoints that might use this domain are covered.

2.Hybrid Configuration: For a Hybrid setup, Microsoft recommends that all domains used by your Exchange organization are included in the SSL certificate. This includes the primary domain (companyA.com) and any subdomains (like webmail.companyA.com.ph).

To end up, while it's not strictly mandatory to add "companyA.com" if it's not directly used for these services, including it in the SSL certificate can provide broader coverage and help avoid potential issues, especially if there are URLs or redirections involving "companyA.com."

If the answer above is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Best Wishes,

Alex Zhang

Camille Ross Ann Rudio 1 Reputation point

2024-12-02T09:51:53.91+00:00

Thank you for the information.

Will there be an impact in transport routing and mailbox migration if we don't add that accepted domain to our SSL certificate?

Camille Ross Ann Rudio 1 Reputation point

2024-12-02T09:58:01.3933333+00:00

Thank you for the information.

Will there be an impact to the transport routing and mailbox migration if we don't include the accepted domain to the SSL certificate?

Alex Zhang-MSFT 2,685 Reputation points Microsoft Vendor

2024-12-02T10:04:52.6333333+00:00

Hello, @Camille Ross Ann Rudio,

As long as "webmail.companyA.com.ph" is correctly configured and your services are using this FQDN covered by the SSL certificate, there should be no negative impact on transport routing and mailbox migration.

It's always good to test the configuration in a controlled manner to ensure all services are functioning as expected.

If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

If you remove an HCW from the Exchange server, is it prohibited to do it again?

1 answer

Your answer