Hybrid Configuration Wizard
Applies to: Exchange Server 2013, Exchange Online
Creating and configuring a hybrid deployment with the Hybrid Configuration wizard is now a single process in Microsoft Exchange Server 2013. Instead of having to use two wizards to create and then configure the HybridConfiguration object as in Exchange Server 2010 SP2, Exchange 2013 consolidates these steps into a single Hybrid Configuration wizard. Plus, the Hybrid Configuration wizard now supports configuring Edge Transport servers in your hybrid deployments.
This topic gives you an overview of the Exchange 2013 hybrid deployment configuration process, hybrid deployment features and options available to you, and the Hybrid Configuration Engine, which executes the core actions necessary for both configuring and updating a hybrid deployment.
For more information about hybrid deployments, check out Exchange Server 2013 Hybrid Deployments.
|This feature of Exchange Server 2013 is currently not compatible with Office 365 operated by 21Vianet in China. For more information, see Learn about Office 365 operated by 21Vianet.|
Here’s a quick overview of the Hybrid Configuration wizard process. First, the wizard creates the HybridConfiguration object in your on-premises Active Directory. This Active Directory object stores the hybrid configuration information for the hybrid deployment and is updated by the Hybrid Configuration wizard. Next, the wizard gathers existing on-premises Exchange and Active Directory topology configuration data, Office 365 tenant and Exchange Online configuration data, defines several organization parameters and then runs an extensive sequence of configuration tasks in both the on-premises and Exchange Online organizations.
|There are several important considerations and prerequisites that you need to complete before you use the Hybrid Configuration wizard. You must meet the requirements for hybrid deployments outlined in Hybrid Deployment Prerequisites. Then you’ll be ready to use the Hybrid Configuration wizard to configure your Exchange organization for the hybrid deployment.|
The general phases of the hybrid deployment configuration process are:
- Verifying prerequisites and performing topology checks The Hybrid Configuration wizard verifies that your on-premises and Exchange Online organizations can support a hybrid deployment. Some of the items that the wizard verifies and checks in the on-premises and Exchange Online organizations are:
On-premises Exchange server versions
Exchange Online version
Active Directory synchronization presence and configuration
Federated and accepted domains
Existing federation trust and organization relationships
Web Services virtual directories
- On-premises Exchange server versions
- Testing account credentials Designated on-premises and Microsoft Office 365 tenant hybrid management accounts access the on-premises and Exchange Online organizations to gather prerequisite verification information and to make organization parameter configuration changes to enable hybrid deployment functionality. The Hybrid Configuration wizard checks that the accounts have the appropriate credentials and can connect to the on-premises and Exchange Online organizations. The hybrid deployment management accounts for both the on-premises and Office 365 organizations must be members of the Organization Management role group for the Hybrid Configuration wizard to complete these tasks successfully.
- Making hybrid deployment configuration changes After testing the hybrid management accounts, conducting the verification and topology checks, and gathering configuration information that you defined in the wizard process, the Hybrid Configuration wizard makes the configuration changes to create and enable the hybrid deployment. All changes to the hybrid configuration are automatically logged in the hybrid configuration log. By default, the hybrid configuration log is located on the on-premises Mailbox server at C:\Program Files\Microsoft\Exchange Server\V15\Logging\Update-HybridConfiguration.
Important: Inbound mail flow is controlled by your organization’s MX record. Inbound Internet email for a hybrid deployment isn’t configured by the Hybrid Configuration wizard.
The Hybrid Configuration wizard automatically enables all hybrid deployment features by default each time it runs. If you want to disable specific hybrid configuration features, you must use the Exchange Management Shell and the Set-HybridConfiguration cmdlet. The following hybrid deployment features are enabled by default by the wizard:
- Free/busy sharing The free/busy sharing feature enables calendar information to be shared between on-premises and Exchange Online organization users. Free/busy sharing is enabled as part of the federated sharing and organization relationship configuration for the on-premises and Exchange Online organizations. Learn more at Sharing.
- Message tracking The message tracking feature records the SMTP transport activity of all messages transferred to and from the on-premises Mailbox servers between the on-premises and Exchange Online organizations. You can use message tracking logs for message forensics, mail flow analysis, reporting, and troubleshooting. Learn more at Understanding Message Tracking.
- MailTips MailTips are informative messages displayed to users while they're composing a message. By enabling MailTips in the hybrid deployment, on-premises and Exchange Online senders can adjust messages they're composing to avoid undesirable situations or non-delivery reports (NDRs) between the organizations. Learn more at MailTips.
- Online archiving Online archiving enables the Exchange Online organization to host user email archives for both on-premises and Exchange Online users. Learn more at Configure Exchange Online Archiving.
- Outlook Web App redirection Outlook Web App redirection provides a single, common URL to access both on-premises and Exchange Online mailboxes. Client Access servers automatically redirect Outlook Web App requests to on-premises mailbox servers or provides a link to users for their mailbox in the Exchange Onine organization.
- Secure mail Secure mail enables secure message delivery between the on-premises and Exchange Online organization via Transport Layer Security (TLS) protocol. The on-premises and Exchange Online organizations are mutually authenticated through digital certificate subjects and email headers and rich-text message formatting are preserved across the organizations.
The Hybrid Configuration wizard allows you to select specific options in several areas for the hybrid deployment. If you want to update specific hybrid configuration options after initially configuring your hybrid deployment, you can use either the Hybrid Configuration wizard or the Exchange Management Shell to select different configuration options.
The table below outlines the main options that the Hybrid Configuration wizard modifies and configures.
The wizard adds an accepted domain to the on-premises organization for hybrid mail flow and Autodiscover requests for the cloud organization. This domain, referred to as the coexistence domain, is added as a secondary proxy domain to any email address policies which have PrimarySmtpAddress templates for domains selected in the Hybrid Configuration wizard. By default, this domain is <domain>.mail.onmicrosoft.com.
You can view the accepted domain by running the following command in the Shell on the cloud organization.
Get-AcceptedDomain | FL DomainName, IsCoexistenceDomain
Secure mail certificate
The wizard requires you to select a specific certificate issued by a third-party Certificate Authority (CA) that is used to authenticate secure email messages sent between the on-premises and Exchange Online organizations.
Exchange federated sharing
The wizard checks to see if there is an existing federation trust with the Microsoft Federation Gateway for the on-premises organization. If present, the existing federation trust is used to support the hybrid deployment. If not present, the wizard creates a federation trust for the on-premises organization with the Microsoft Federation Gateway. The wizard also adds any domains selected within the Hybrid Configuration wizard to the federation trust.
In addition to the federation trust configuration, the wizard also creates and configures organizational relationships for both the on-premises and Exchange Online organizations. These organization relationships allow the wizard to enable several hybrid deployment features, including free/busy sharing, Outlook Web App redirection, message tracking, and MailTips.
The wizard allows you to select and configure Client Access or Edge Transport servers to handle secure mail transport between the on-premises and Exchange Online organizations.
The wizard configures on-premises Client Access servers and Microsoft Exchange Online(EOP) on your Office 365 organization for hybrid mail routing. By configuring new and existing Send and Receive connectors in the on-premises organization and Inbound and Outbound connectors in EOP, the wizard allows you to choose whether outbound messages delivered to the Internet from the Exchange Online organization will be sent directly to external mail recipients or routed through your on-premises Exchange servers included in the hybrid deployment.
The Hybrid Configuration Engine executes the core actions necessary for configuring and updating a hybrid deployment. Responsible for processing the
Update-HybridConfiguration cmdlet actions, the Hybrid Configuration Engine compares the state of the HybridConfiguration Active Directory object with current on-premises Exchange and Exchange Online configuration settings and then executes tasks to match the deployment configuration settings to the parameters defined in the HybridConfiguration Active Directory object. If the current on-premises Exchange and Exchange Online deployment configuration states already match the settings defined in the HybridConfiguration Active Directory object, no changes are made by the Hybrid Configuration Engine to either the on-premises or Exchange Online organizations.
When updating an existing hybrid deployment, the Hybrid Configuration Engine performs the following steps:
The Update-HybridConfiguration cmdlet triggers the Hybrid Configuration Engine to start.
The Hybrid Configuration Engine reads the “desired state” stored on the
HybridConfigurationActive Directory object.
The Hybrid Configuration Engine discovers topology data and current configuration from the on-premises Exchange organization.
The Hybrid Configuration Engine discovers topology data and current configuration from the Exchange Online organization.
Based on the desired state, topology data, and current configuration, the Hybrid Configuration Engine establishes the “difference” between the on-premises Exchange and Exchange Online organizations and then executes configuration tasks to establish the desired state.
The following figure shows a summary of how the Hybrid Configuration Engine retrieves and modifies on-premises Exchange server and Exchange Online in Office 365 configuration settings during the hybrid deployment process.