ful56_uk Posted October 9, 2013 Posted October 9, 2013 Hi I'm a little confused about DNS records for office 365, I have all the other DNS records in place apart from mx and auto discover, I've left these for now because they are pointing at our current exchange system (on-premises) I don't want to remove them as the current mail flow etc... To the on premises exchange will break. Or do I have to add office 365 DNS records in order to complete the hybrid setup? Thanks
funkyfin2000 Posted October 9, 2013 Posted October 9, 2013 You will need to add some DNS records to validate/verify your domain for Educational licencing (although you can skip this part and come back later and complete it if you wish) - Sounds like you have done this bit. You can then - if you wish - add in the DNS records for Lync to work. At that point you can stop - because otherwise you will be adjusting your MX records and redirecting your mail (something you don't need to do until you are ready) That's it really 1
ful56_uk Posted October 9, 2013 Author Posted October 9, 2013 Cheers, so for a hybrid deployment to work full do I need to change my mx records or leave them point at my current exchange because I want to mail to be routed through that as we are only looking to move student accounts to 365 first.
EduTech Posted October 9, 2013 Posted October 9, 2013 Hi, In order to start using Office 365 you will need to add a TXT/MX Record in order to verify your domain within the office 365 cloud service and this won't affect your current configuration as it's purely for validating your domain, you can add the other records in at a later date should you wish I.e. MX Records, CNAME Records, A Records. If you are looking at setting up a hybrid deployment, you will need to add a further TXT record and the value you will be a generated string which you will again need to add into your Public DNS in order to verify your domain again for the hybrid deployment, but again this will make not changes to your current exchange deployment. Furthermore, once this has been completed you will need to ensure that your autodiscover.domain.sch.uk A record points to the IP Address of your Hybrid Exchange 2010 SP3 Server. During the hybrid deployment wizard, you will be asked to select how you want to route email in terms of outbound if you need to continue to send emails out of your existing smarthost then you need to select set that option, or you can set it to send all email's outbound via DNS once a user is on Office 365. during the Hybrid Scenario mail will still be routed to your on-premise exchange deployment, when you do the remote move requests... re-routing email addresses are created which sends emails to your users whom are hosted on exchange online via the @tenant.mail.onmicrosoft.com alias which they have assigned to them. You only ever need to use TXT Records when setting up the Hybrid / Office 365 deployment, you do not need to change any other records. Everything else can stay as it is, until you have completed the migration and potentially happy to then point your MX Records / A Records to Office 365 FOPE. I hope that makes sense, any questions just let me know. James. 1
ful56_uk Posted October 9, 2013 Author Posted October 9, 2013 Cheers for the info, makes sense One question, I've tried moving a mailbox to the cloud but get this error Error: MigrationPermanentException: The target mail user 'year7' doesn't have an SMTP address that matches the target delivery domain 'mydomain.mail.onmicrosoft.com'. --> The target mail user 'year7' doesn't have an SMTP address that matches the target delivery domain 'mydomain.mail.onmicrosoft.com'. The year7 account has an email address of [email protected] under its user properties Cheers
EduTech Posted October 9, 2013 Posted October 9, 2013 Hi, You need to ensure that you have followed all of the steps required when setting up the hybrid deployment. All of your users required a @domain.mail.onmicrosoft.com SMTP Alias. If they do not have these, then the first thing to check is that they are set to automatically update as per organization email address policy. You won't be able to carry out any move requests, if they do not have this alias... as once the move request completes it creates a contact within exchange on-premise which contains a re-route email address which = the @tenancy.mail.onmicrosoft.com address. I hope that helps, James.
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 Thanks for all the info, almost there, I have one problem, I can't email from a cloud account to an on premise account, anything I need to look out for or check I can email from an premise account to cloud fine and cloud to external fine too Thank you
sukh Posted October 10, 2013 Posted October 10, 2013 when you run the HCW it will create connectors for mailflow. test.
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 Did that didn't work, got a call open with ms
EduTech Posted October 10, 2013 Posted October 10, 2013 Did that didn't work, got a call open with ms Hi, Have you ensured that the SSL certificate has been binded to SMTP Service? Can you ensure the connector has been setup in FOPE? Can you ensure the correct IPs are in the receive connector for microsoft's data centres? Im not on my computer at the moment but I'll try and help you later or tomorrow if you want Regards, James.
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 Hi, Have you ensured that the SSL certificate has been binded to SMTP Service? Can you ensure the connector has been setup in FOPE? Can you ensure the correct IPs are in the receive connector for microsoft's data centres? Im not on my computer at the moment but I'll try and help you later or tomorrow if you want Regards, James. You themselves is binded The connector is listed on fope I've found a doc on help.outlook.com with the Ips listed so I'm just checking that at mo Thanks for your suggestions
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 what doesn't work? did the hcw complete? Sending email from the cloud to on premises users Yes the wizard did complete
sukh Posted October 10, 2013 Posted October 10, 2013 you shouldn't have to do that. The hcw does it all for you. I assume you have sp3 on hybrid server? when you send do you get an ndr? where iz it queued? check trace on o365?
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 you shouldn't have to do that. The hcw does it all for you. I assume you have sp3 on hybrid server? when you send do you get an ndr? where iz it queued? check trace on o365? Yup hybrid is at sp3 level Don't get a ndr yet, I can see all the messages on the office365 trace pending/defer
EduTech Posted October 10, 2013 Posted October 10, 2013 Yup hybrid is at sp3 level Don't get a ndr yet, I can see all the messages on the office365 trace pending/defer I have things to try, but I'm stuck at the moment I can't write it all on my phone. :-) Do you have remote access the server... James.
sukh Posted October 10, 2013 Posted October 10, 2013 can you post your outbound connector on o365 can you also up logging on hybrid o365 connector (receive) & see if a connection is being made and the status. I.e protocol logging 1
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 I have things to try, but I'm stuck at the moment I can't write it all on my phone. :-) Do you have remote access the server... James. Hi James I do have remote access, it's a very kind offer, only thing I can think of is I am using a wild card ssl cert Mark
EduTech Posted October 10, 2013 Posted October 10, 2013 Hi James I do have remote access, it's a very kind offer, only thing I can think of is I am using a wild card ssl cert Mark Yes I believe that will be your problem. You cannot use a wildcard certificate in a hybrid deployment. The Subject Name needs to be specified such as (exch2010.domain.co.uk) in order got the TLS to authenticate etc. you also need your autodiscover.domain.co.uk in the SANs. James.
sukh Posted October 10, 2013 Posted October 10, 2013 wild certs are supported with sp3 was an old issue pre sp3. thr hcw wouldn't complete if cert was an issue.
EduTech Posted October 10, 2013 Posted October 10, 2013 Hi James I do have remote access, it's a very kind offer, only thing I can think of is I am using a wild card ssl cert Mark Read this - http://blogs.technet.com/b/danielkenyon-smith/archive/2012/05/23/office-365-hybrid-configuration-wizard-hcw.aspx James.
ful56_uk Posted October 10, 2013 Author Posted October 10, 2013 I thought you could use wild card ssl, I'll look again tomorrow
sukh Posted October 10, 2013 Posted October 10, 2013 I'd look at protocol logging as mentioned & try opportunistic tls for the outbound connector.
jamesbmarshall Posted October 10, 2013 Posted October 10, 2013 Just chiming in here.. this link might be useful to have a read through: Hybrid deployment - exchange cannot send email to Office 365 due to STARTTLS - Upgrade to Office 365 - Office 365 - Microsoft Office 365 Community
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now