Exchange cutover migration will work with AAD connect sync user?

Takumi 21 Reputation points
2022-01-20T08:45:56.61+00:00

This Exchange cutover migration step works with synced Azure AD connect user?
https://learn.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365#step-3-create-the-cutover-migration-batch

Now, customer uses local domain(aa.local) internally and uses another domain(aa.com) as email in Exchange server.
So, I plan to add mail attribute(user@aa.com) to each user.
And then, use email attribute as Azure AD user name when I sync user.

my estimated step

  1. add email attribute to ad user
  2. build AD connect server and sync user (365 username will be mail address(aa.com)
  3. user Exchange cutover step and sync mail box to Azure AD connect synced user

Does this work well?

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,503 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,631 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 100.2K Reputation points MVP
    2022-01-20T09:12:04.827+00:00

    No, this will not work. Generally speaking, dirsync is not supported for Cutover migration. The reason being, Cutover provisions accounts differently. As in, Cutover uses its own provisioning mechanisms and if an account already exists, it will throw an error. Also, the provisioning is based on a different attribute (mail/WindowsEmailAddress), compared to what dirsync uses, and can again cause troubles.

    The "correct" way to do this is preform the cutover first, and only enable dirsync after the migration has been completed.

    2 people found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Joyce Shen - MSFT 16,651 Reputation points
    2022-01-21T02:22:43.927+00:00

    Hi @Takumi

    Agree with the suggestions above from michev, Azure AD Connect is the successor to DirSync and Azure AD Sync. It combines all scenarios these two supported.

    And cutover migration doesn’t need AAD connect. After cutover migration, the on-premise organization is separated from Exchange Online, you could uninstall Exchange on-premise server this moment. Then prepare AD and use SMTP match to do directory synchronization via AAD connect. Here is a related link for your reference as well: Decommissioning Exchange Server with Azure sync In Place
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Luca 1 Reputation point
    2022-04-27T16:54:12.503+00:00

    @Vasil Michev @Joyce Shen - MSFT

    Hi,
    one question regarding the cutover: once the cutover has been completed and AAD Synch enabled and soft-matching has "fused" the relevant users, is it possible to somehow manage the Exchange Online attributes solely online without the On Prem server by additional attribute filtering or does the presence of AD Synch completely exclude this possibility? I know the official answer is no as you need an on prem Exc Server just for this, but I am wondering this due to the following reasoning.

    For ex. if one never has installed Exchange On Prem and has O365 mailboxes and subsequently decides to enable AD Synch for management ease (password synch for ex.) and soft match the accounts, why would one not be able to administer the maibox properties solely online? It appears that the moment one implements any kind of AD synch the on Prem AD is in charge, even if there are no specific Exchange attributes present in the on prem AD schema.
    So is it possible prior to the first AD Synch to implement specific attribute filters that will allow the administration of mailbox properties (such as additional SMTP addresses) through Exc online or does the AD Sync "enabling" exclude this completely?

    Thanks!

    0 comments No comments