Best practice in Onboarding & Offboarding users in a Hybrid OnPremise AD DS & Exchange Online environment?

Question

Hi People,

I need some best practices and suggestions for Onboarding & offboarding users in a Hybrid AD DS environment.

All of the mailboxes have been migrated to Office 365/Exchange Online, and the on-premise Active Directory DS is synced to Azure using Azure AD connect.

Thanks in advance.

Answer 1

Once the account is deleted from Azure, the license is freed up.
See for more:
https://learn.microsoft.com/en-us/answers/questions/578266/when-can-you-remove-the-license-from-a-deleted-o36.html

Answer 2

In a nutshell:

Onboard:
Create the AD account on-prem,
enable the remote mailbox on-prem and let it sync:
https://learn.microsoft.com/en-us/system-center/orchestrator/enable-remote-mailbox-hybrid?view=sc-orch-2022
https://learn.microsoft.com/en-us/powershell/module/exchange/enable-remotemailbox?view=exchange-ps
Enable-RemoteMailbox "Kim Akers" -RemoteRoutingAddress "kima@Company portal .mail.onmicrosoft.com"

License Account.

OffBoard:

Create an OU that is not synced to Azure:
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#organizational-unitbased-filtering

Remove any licenses.
Disable the account and Move to that OU.

Disable the remote mailbox on-prem:

https://learn.microsoft.com/en-us/powershell/module/exchange/disable-remotemailbox?view=exchange-ps

Disable-RemoteMailbox "Kim Akers"  

More:
https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee?view=o365-worldwide