Exchange 2016 and Gmail

[MS2011]

Good morning

 

We are running a hybrid exchange 2016 with office 365. We want to be able to setup dual delivery of emails with exchange being the primary email server.

 

And I want to move pupils to G suite only.

 

What is the best way to do this?

[KK20]

Good morning

 

We are running a hybrid exchange 2016 with office 365. We want to be able to setup dual delivery of emails with exchange being the primary email server.

 

And I want to move pupils to G suite only.

 

What is the best way to do this?

 

You want DUAL delivery i.e. email delivered to both? So you want to maintain a fully working office 365 mailbox AND a fully working Gsuite mail? This is for pupils only. In that case you want to set up mail forwarding on your primary server and "keep a copy of forwarded messages". If you GSuite and Exchange are the same domain then this wont initially work, you will need a different domain. Be mindful that if people start to send to the alt domain then these will not propagate to the primary domain.

 

If you move all of your pupils from o365 to gmail then you will need a mail enabled contact at least (to forward) remaining on the exchange server. This becomes a split delivery as there will not longer be a mail account on the exchange server for your pupils. In this scenario you will also need mail contacts on gmail to forward back to teachers on your "primary" domain.

 

BAsically "option 2 + option 2" on this https://support.google.com/a/answer/9228551?hl=en#zippy=%2Coption-server-based-forwarding-recommended%2Coption-forward-to-a-test-domain-alias

Edited January 26, 2021 by KK20

[MS2011]

We don’t want dual delivery, pupils will be on G suite and staff will be on exchange.

[chaplic]

If you're not bothered about pupils appearing the exchange GAL

 

 

then

 

Keep MX record pointing where it is (on prem/ O365)

 

In both O365 and On prem, create a connector for yourdomain.sch.uk pointing to the servers that gmail tell you to use for MX

In both O365 and On prem, change the yourdomain.sch.uk to be an internal relay

 

The result will be any email sent to an address not in exchange will be pushed to gmail. You may need to consider if this will work for cloud only accounts that want to receive mail

[MS2011]

Primary mail server will be exchange.

[KK20]

then look at the second link for split delivery. A mail enabled "pupil forwarder" contact on the primary exchange server, subdomain accounts for pupils under gmail. Forward from mail enabled contact to gmail subdomain. Leave your MX records intact for delivering to primary domain.

[MS2011]

You want DUAL delivery i.e. email delivered to both? So you want to maintain a fully working office 365 mailbox AND a fully working Gsuite mail? This is for pupils only. In that case you want to set up mail forwarding on your primary server and "keep a copy of forwarded messages". If you GSuite and Exchange are the same domain then this wont initially work, you will need a different domain. Be mindful that if people start to send to the alt domain then these will not propagate to the primary domain.

 

If you move all of your pupils from o365 to gmail then you will need a mail enabled contact at least (to forward) remaining on the exchange server. This becomes a split delivery as there will not longer be a mail account on the exchange server for your pupils. In this scenario you will also need mail contacts on gmail to forward back to teachers on your "primary" domain.

 

BAsically "option 2 + option 2" on this https://support.google.com/a/answer/9228551?hl=en#zippy=%2Coption-server-based-forwarding-recommended%2Coption-forward-to-a-test-domain-alias

 

Is this possible?

[MS2011]

then look at the second link for split delivery. A mail enabled "pupil forwarder" contact on the primary exchange server, subdomain accounts for pupils under gmail. Forward from mail enabled contact to gmail subdomain. Leave your MX records intact for delivering to primary domain.

 

And we would like to use same domain name for both emails. Do I need to create pupil forwarder for each pupil on exchange?

[KK20]

I dont understand. what do you mean "is it possible"? Currently you have your MX pointing to Exchange. an email arrives and exchange decides what to do with it. You want teacher email to "stay where they are" but you want pupil emails to "go to gmail". This means you need a mechanism for moving emails from your pupils to gmail. You dont want pupil emails to remain on exhcange.

 

Now, you CAN leave a full fat mail account enabled on exchange, this might be useful for your teams. In this case you can forward ALL emails (and not leave a copy) to "another address somewhere else". This will work, we do this all the time for school staff who work for other companies (such as our catering manager) - she has a catering manager email address elsewhere and doesnt care about using her school domain to check emails, but she can still access the teams using her school logon details but all the emails get forwarded outside the school.

 

Now the caveat. Make sure your school antispam system is good. if not ALL SPAM going to those forwarders will be forwarding. GMail will see that the spam is being forwarded by YOUR DOMAIN and will blacklist you.

[MS2011]

I dont understand. what do you mean "is it possible"? Currently you have your MX pointing to Exchange. an email arrives and exchange decides what to do with it. You want teacher email to "stay where they are" but you want pupil emails to "go to gmail". This means you need a mechanism for moving emails from your pupils to gmail. You dont want pupil emails to remain on exhcange.

 

Now, you CAN leave a full fat mail account enabled on exchange, this might be useful for your teams. In this case you can forward ALL emails (and not leave a copy) to "another address somewhere else". This will work, we do this all the time for school staff who work for other companies (such as our catering manager) - she has a catering manager email address elsewhere and doesnt care about using her school domain to check emails, but she can still access the teams using her school logon details but all the emails get forwarded outside the school.

 

Now the caveat. Make sure your school antispam system is good. if not ALL SPAM going to those forwarders will be forwarding. GMail will see that the spam is being forwarded by YOUR DOMAIN and will blacklist you.

 

Perfect, thanks!!

[KK20]

you will also need to configure gmail for return paths and you dont want forwarding loops. In this case you will need to set gmail as a validated primary domain also and set that as your outbound address (SPF etc updated so that your exchange and gmail are allowed to send on your behalf). Again, this is done with various other companies, we used to use "oliver" as a library software, this did NOT interface with our exchange server and would send emails to our pupils via its own mail server - we needed to add their mail servers to our SPF and pray they didnt spam on our behalf (as we would be blacklisted for their spam).

 

So 1) exchange accounts (or contacts, your choice) forward (and not keep) @schooldomain.co.uk to @gmail.schooldomain.co.uk

2) gmail has both @schooldomain.co.uk and @gmail.schooldomain.co.uk validated

3) gmail has @schooldomain.co.uk set as the send

4) leave your MX alone but update your SPF DKIM should be fun

 

I dont have any knowledge of gmail - point 3 should be fine. Our exchange has school.sch.uk and school.co.uk for every account but we only send on our school.co.uk this would be no different for gmail

 

As for actually DOING this, I have no idea on how to bulk edit gmail but for exchange powershell could sort this out.

Edited January 26, 2021 by KK20

[MS2011]

Dear all

 

Senior SLT’s have decided that we are going to move fully to gmail. Current setup is Exchange hybrid and 1500 users with 500Gb mailboxes dB size.

 

Any suggestions?

 

We are using G Suite on a different domain and would like migrate to main tenant.

 

Thanks