70-346 Deploying Office 36 in Production

Step 2 Deployment Overview

What is DirSync?

Purpose – What does it do?

Understanding Synchronization

Understanding Coexistence

Understanding Migrations

Self Service

Admin lead

Migration Options

PST migrations

IMAP migrations

Staged Exchange migrations

Build from Pilot to

Deployment, layer

features and

integrations

Full Office 365 User

Experience with

minimal on-premises

requirements

Time to value vs. effort

invested

Identity options:

cloud IDs,

synchronized IDs

and federated IDs

John

https://www.pass4sureexam.com/70-346.html


Experience Value EarlyNew Cloud Experience

Real World BenefitsBroad Production Use

Full Feature ValueMeet your needs

Deploy EnhancePilot



Pilot complete Deploy Complete Adopt new features

Deploy EnhancePilot

Sign-onIntegrated identity management

Sign-on with the same user and password as on premises

Mail

Integrated mail flow and migration

Global address list

Full mail content migration – mail, calendar, contacts

Collaboration

Sharing and working with others

Lync business partner federation

Site governance and provisioning support

Setup of Apps for Office corporate app catalog

ClientsIT managed client productivity

Office 365 ProPlus deployed to user desktop via IT process

MobileManaged mobile connectivity

Send and receive mail from mobile device as on-prem email

AdministrationControl & monitor

Data loss prevention configuration (limited)

Exchange Online Protection mail protection configuration (limited)

Setup in days

Adds on-premises integration

Pilot user and info is sustained

IT driven migration

Mail migration that best fits environment

Deploy Experience – what’s added

Identity

What’s Required

Directory Sync server/s

AD meets service requirements for hygiene

Same password on-prem and in cloud via password sync

Network

What you need to connect

Network access to service from client end points

Network bandwidth availability

Access to maintain DNS entries for share domains

ClientsRequired to connect and deploy

Web client – minimum browser

Office 365 Pro Plus – clients running Windows 7 +

Unique requirements per

mail platform

Dedicated customer IT

team

Change management

readiness

Mail

Required to setup and migrate

Admin access

Deploy – what’s required



Cloud Identity

Single identity in the cloud

Directory & Password Synchronization

Single identity without federation

Federated Identity

Single federated identity

and credentials

Deploy Identity Scenario

Deploy EnhancePilot

http://aka.ms/sync

http://aka.ms/sync





















On-premises

ExchangeActive Directory

Office 365

Windows Azure

Active Directory

Directory

Synchronization Provisioning Web

Service

Logon Enabled User

Mail-Enabled (not mailbox-enabled)

ProxyAddresses:

SMTP: [email protected]

smtp: [email protected]


TargetAddress:


Exchange Online

Authentication Platform

SharePoint Online

Lync Online

User Object

Mailbox-Enabled

ProxyAddresses:


Sync Cycle Stage 3:

Export Users, Groups, and

Contacts to Office 365

Sync Cycle

Stage 4:

Export “Write Back” attributesSync Cycle Stage 2:

Import Users, Groups, and

Contacts from Office 365

In MOP, select

users and groups | DirSync Set up

Activate Directory Synchronization

(can take up to 24h to propagate)Form DirSync server

Download DirSync

Introduced with DirSync in June 2013

Benefits of using Password Sync as an alternative to Federated Authentication

“Single set of credentials” to access both on-premises and online resources Managed in the customer’s Active Directory and is synchronized with Office 365

(username + password)

Fully integrated in the DirSync appliance

No requirement for Active Directory Federation Services. Keeps the deployment simple and eliminates IT costs associated with AD/FS

Does not require nor access the plain text password

No requirement for AD reversible encrypted format

AD user password hash is hashed again using a non-reversible encryption function and digest is synchronized into Azure AD

The digest in Azure AD cannot be used to access resources in the customer’s on-premises environment

One-way synchronization from on-premises to the cloud

Password Complexity Policy implemented in the on-premises AD is the master policy Password Expiration Policy on the Azure AD is set to “Never Expire”

Password expiration and sync to Azure AD is driven by on-premises events





On-premises

Messa

ge F

ilterin

g

MX Record:

contoso.com

User Object

Mailbox-Enabled

ProxyAddresses:





On-premises

Messa

ge F

ilterin

g

MX Record:

contoso.com


Office 365

MX Record:

contoso.onmicrosoft.com

contoso.mail.onmicrosoft.com

Exc

han

ge O

nlin

e P

rote

ctio

n

Exchange Online Online Directory

DirSync DirSync Web

Service

Logon Enabled User

Mailbox-Enabled

ProxyAddresses:




User Object


ProxyAddresses:


TargetAddresses:




On-premises

Messa

ge F

ilterin

g

MX Record:

contoso.com


Office 365

MX Record:

contoso.onmicrosoft.com

contoso.mail.onmicrosoft.com

Exc

han

ge O

nlin

e P

rote

ctio

n

Exchange Online Online Directory

DirSync DirSync Web

Service

Logon Enabled User


ProxyAddresses:




TargetAddresses:


User Object

Mailbox-Enabled

ProxyAddresses:




49 | Microsoft Confidential

Exchange

IMAP

Lotus Notes

Google

Large

Medium

Small

In-Cloud

On-Premise

Single Sign-On

DirSync

Manual/Bulk Provisioning

Simple

Rich

Self serve or Admin Driven

Features by user type

Cloud or on-premises tools

PS

T M

igra

tio

n

IMA

P m

igra

tio

n

Sta

ged

mig

rati

on

Hyb

rid

Exchange 5.5 X X

Exchange 2000 X X

Exchange 2003 X X X

Exchange 2007 X X X

Exchange 2010 X X X

Exchange 2013 X X X

Notes/Domino X X

GroupWise X X

Other X X

FastTrack Step 2 Migration OptionsM

igra

tio

n

PST MigrationImport of Archived/Offline Mail

IMAP migrationSupports wide range of email platforms

Email only (no calendar, contacts, or tasks)

Staged Exchange migration

No server required on-premises

Identity federation with on-premises directory

Hyb

rid

Hybrid deployment

Manage users on-premises and online

Enables cross-premises calendaring, smooth migration, and easy off-boarding

Self Service or Admin Driven OptionsControl Deployment Type Description

Self Service

Admin-Driven

Prepare

for

IMAP

Migration

Create

IMAP

Migration

Endpoint

Create a

CSVs for

IMAP

Migration

Delete

IMAP

Migration

Batches

Configure

MX

Record

Pointing

to Office

365

Start

IMAP

Migration

Batch

Create

IMAP

Migration

Batch

Best practices

Prepare

for

IMAP

Migration

Best practices

Start

IMAP

Migration

Batch

Create

IMAP

Migration

Batch

Convert On-

Premise

Mailboxes to

Mail-Enabled

Users

Prepare

for Staged

Migration

Create

Migration

End-Point

Create a

CSV File

for Staged

Migration

Batch

Complete

Post-

Migration

Tasks

Delete

Staged

Migration

Batch

Start a

Staged

Migration

Batch

Create a

Staged

Migration

Batch

Best practices

Prepare

for Staged

Migration

Best practices

Create a

CSV File

for Staged

Migration

Batch

Create

Migration

End-Point



Best practices

Start a

Staged

Migration

Batch

Best practices

Convert On-

Premise

Mailboxes to

Mail-Enabled

Users



Best practices

Delete

Staged

Migration

Batch



Best practices

Complete

Post-

Migration

Tasks



http://technet.microsoft.com/en-us/library/jj219422.aspx

http://technet.microsoft.com/en-us/library/jj219422.aspx



http://ignite.office.com/office365

http://fasttrack.office.com

http://ignite.office.com/office365

http://fasttrack.office.com/

Documents

70-346 Deploying Office 36 in Production