Office 365 Workshop Links – May 2017

This is a link throw-down for the items discussed during a recent Office 365 workshop that I delivered to customers in beautiful Montreal last week.

I’m posting the links here since they will be available to all of the attendees, and thought that others may also find them useful/interesting.

PowerShell Tips And Tricks

Start with these three articles:

How To Maximize Exchange Administrator Productivity With PowerShell–Part 1

How To Maximize Exchange Administrator Productivity With PowerShell–Part 2

How To Maximize Exchange Administrator Productivity With PowerShell–Part 3

For all PowerShell posts, please review this tag.

Office 365 Public Roadmap


Current Exchange 2016 Cumulative Update

Exchange 2016 CU5

Exchange Hybrid

Office 365 Mailbox Migration – Target Mailbox Doesn‎'t Have An SMTP Proxy Matching

Delivery Failed From Office 365 Mailbox To On-Premises Exchange Mailbox

Office 365 Exchange Hybrid Deployments Busting The Autodiscover Myth

Office 365 Autodiscover Lookup Process

Users in a hybrid deployment can't access a shared mailbox that was created in Exchange Online

Cross Premises Shared Mailbox Support

Planning an Exchange hybrid deployment.  This page has the support statement around what cross-premises permissions are supported.  The below is from August 2016.

You should consider the following before you implement an Exchange hybrid deployment:

  • Hybrid deployment requirements Before you configure a hybrid deployment, you need to make sure your on-premises organization meets all of the prerequisites required for a successful deployment. For more information, see Hybrid deployment prerequisites.
  • Exchange ActiveSync clients  When you move a mailbox from your on-premises Exchange organization to Exchange Online, all of the clients that access the mailbox need to be updated to use Exchange Online; this includes Exchange ActiveSync devices. Most Exchange ActiveSync clients will now be automatically reconfigured when the mailbox is moved to Exchange Online, however some older devices might not update correctly. For more information, see Exchange ActiveSync device settings with Exchange hybrid deployments.
  • Mailbox permissions migration  On-premises mailbox permissions such as Send As, Receive As, and Full Access that are explicitly applied on the mailbox are migrated to Exchange Online. Inherited (non-explicit) mailbox permissions and any permissions on non-mailbox objects—such as distribution lists or a mail-enabled user—are not migrated. Therefore, you have to plan for configuring these permissions in Office 365 if applicable for your organization. For example, you can use the Add-RecipientPermission and Add-MailboxPermission Windows PowerShell cmdlets to set the permissions in Office 365.
  • Support for cross-premises mailbox permissions Exchange hybrid deployments support the use of the Full Access mailbox permission between mailboxes located in an on-premises Exchange organization and mailboxes located in Office 365. A mailbox on an on-premises Exchange server can be granted the Full Access permission to an Office 365 mailbox, and vice versa. For example, an Office 365 mailbox can be granted the Full Access permission to an on-premises shared mailbox. Users need to open the mailbox using the Outlook desktop client; cross-premises mailbox permissions aren't supported in Outlook on the web.NoteNote:

    Users might receive additional credential prompts when they first access a mailbox that’s in the other organization and add it to their Outlook profile.

    We don’t, however, support the use of the Send-As, Receive-As, or Send on behalf of mailbox permissions in hybrid deployments between on-premises Exchange and Office 365 organizations. We also don't support delegating permissions to a mailbox or individual folders using the Outlook client. These permissions are only available when both the mailbox granting the permissions, and the mailbox receiving the permissions, are in the same organization. Any mailboxes that receive these permissions from another mailbox need to be moved at the same time as that mailbox. If a mailbox receives permissions from multiple mailboxes, that mailbox, and all of the mailboxes granting permissions to it, need to be moved at the same time. In addition to these permissions, the Auto Mapping feature is also unsupported when used between mailboxes in the on-premises Exchange and Office 365 organizations.



Install AD FS 2016 for Office 365 – first post published.  Additional ones to follow.

How To Install AD FS 2016 For Office 365

Installing AD FS 2012 R2 For Office 365 – Step By Step series of 3 posts:

  1. Install ADFS

  2. Install ADFS Proxy

  3. Leverage ADFS with Office 365

ADFS 2012 R2 Extranet Account Lockout Protection

Directory Synchronisation

Plan to install Azure Active Directory Connect 1.1  - older solutions are depreciated and will exit out of support in early 2017.

DirSync release announcement of Password Sync.

Managing Directory Synchronisation – Notes From The Field

List of Attributes that are Synced by the Azure Active Directory Sync Tool

How To Run Manual DirSync / Azure Active Directory Sync Updates

DirSync: How To Switch From Single Sign-On To Password Sync

Modern Authentication

Authentication changes are available in Office 2013 and Office 2016.  The solution has been called Modern Authentication.

This was first announced at MEC 2014 and earlier on the Office blog.  The November update on the topic is here.

Training Links

Microsoft Virtual Academy – multiple training videos

Office Technical Blog

Garage Series

Service Descriptions

Exchange Online Service Description – required reading!  Especially the limits section.  Read this now.  Do not be surprised…..

Updated IE Support Policy

Stay up-to-date with Internet Explorer


MXToolbox – useful site to test DNS records, SMTP blacklists etc.

Remote Desktop Manager 2.7 – download

Test Exchange Connectivity (EXRCA)

Teds Webtools

Network Tools (note that there is a hyphen in the domain name)


EOP Field Notes – Andrew Stobart’s excellent EOP blog

Anti-spam message headers

Enhanced email protection with DKIM and DMARC in Office 365

DMARC - What is it?

Save The Date - End Of Forefront Protection 2010 For Exchange -- T Minus 12 Months

How to Configure an Internal SMTP Relay Server for Office 365

Various Links

RBAC Primer

RBAC manager – Codeplex

Exchange Autodiscover

Remove Management Role Entries – since was unable to pipeline this in Exchange Online

Sysinternals Tools easy download  – http://live.sysinternals.com/

Manual Exchange Hybrid Configuration Steps – no longer supported but revel in the fact that you now have the HCW!

Friday Morning Rant – Premise and Tenents

Quick Tip: Is There A Shortcut URL To Download Azure AD PowerShell?


This is what happens when you reply to spam – TED talk

Weather forecasting stone

The Register – UK IT News site



Rhoderick Milne [MSFT]

Leave a Reply

Your email address will not be published. Required fields are marked *