Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
IM
AP
mig
rati
on
Cu
tover
mig
rati
on
Sta
ged
mig
rati
on
20
10
Hyb
rid
20
13
Hyb
rid
Exchange 5.5
Exchange 2000
Exchange 2003
Exchange 2007
Exchange 2010
Exchange 2013
Notes/Domino
GroupWise
Other
Sim
ple
Mig
rati
on
s H
yb
rid
IMAP Migration Supports wide range of email platforms
Email only (no calendar, contacts, or tasks)
Cutover Exchange Migration (CEM)
Good for fast, cutover migrations
No migration tool or computer required on-premises
Staged Exchange Migration (SEM)
No migration tool or computer required on-premises
Requires Directory Synchronization with on-premises AD
Hybrid Deployment
Manage users on-premises and online
Enables cross-premises calendaring, smooth migration, and easy off-boarding
• Delegated authentication for on-premises/cloud web services
• Enables Free/Busy, calendar sharing, message tracking, online
archive, and more Federation Trust
• Manage all of your Exchange functions, whether cloud or on-
premises from the same place - Exchange Administration
Center (EAC)
Integrated Admin
Experience
• Online mailbox moves
• Preserve the Outlook profile and offline file (OST)
• Leverages the Mailbox Replication Service (MRS)
Native Mailbox
Move
• Authenticated and encrypted mail flow
• Preserves the internal Exchange messages headers
• Support for compliance mail flow scenarios (central transport) Secure Mail Flow
2. Deploy Exchange 2013 servers
Install both E2013 MBX and CAS servers
Install E2010 EDGE servers
Set an ExternalUrl for the Exchange Web Services vdir
E2010 or
2007 Hub
Internet facing site
Intranet site
Exchange 2010
or 2007 Servers
1. Prepare
Install Exchange SP and/or updates across the ORG
Prepare AD with E2013 schema
4. Publish protocols externally
Create public DNS A records for the EWS and SMTP
endpoints
Validate using Remote Connectivity Analyzer
5. Switch autodiscover namespace to E2013 CAS
Change the public autodiscover DNS record to resolve
to E2013 CAS
6. Run the Hybrid Configuration
Wizard
E2013
CAS
3. Obtain and Deploy Certificates
Obtain and deploy certificates on E2013 MBX and CAS
servers & E2010 EDGE servers
Clients autodiscover.contoso.com
mail.contoso.com
1 2
3
4
5
6
E2010 or
2007 CAS
E2010
or 2007
MBX
E2013
MBX
SP/RU
SP/RU
Office 365
7. Move mailboxes
Autodiscover &
EWS SMTP
E2010
EDGE
7
Perimeter Network
ADFS 2.0
Proxy
Active
Directory
ADFS 2.0
ADFS 2.0
ADFS 2.0
Proxy
Load balancer Load balancer
Internal Network
Basic Authentication
(Active Profile)
Passive Federation
(Passive Profile)
Number of users Minimum number of servers
Fewer than 1,000 users 0 dedicated federation servers
0 dedicated federation server proxies 1 dedicated NLB server
1,000 to 15,000 users 2 dedicated federation servers 2 dedicated federation server proxies
15,000 to 60,000 users Between 3 and 5 dedicated federation servers At least 2 dedicated federation server proxies
On-Premises
Identity
Services
Provisioning
platform
Active Directory
Federation
Server 2.0
Trust
Directory
Store
Admin Portal/
PowerShell
Authentication
platform
MSOL PowerShell
Module
Office 365
Add Domain
Required
TXT/MX Record
Add Trust
- Claim Rules
- User Source ID = AD ObjectGUID
Verify-Domain
- Active/Mex/Passive
- Token certs Current/Next
- Brand URI etc
Update
Lync 2010/Office Subscription
Active Sync
Corporate Boundary
Exchange Online
AD FS 2.0Server
MEX
Web
Active
AD FS 2.0 Proxy
MEX
Web
Active
Outlook 2010/2007IMAP/POP
UsernamePassword
UsernamePassword
OWAInternal
Lync 2010/Office Subscription
Outlook 2010/2007IMAP/POP
OWAExternal
UsernamePassword
Active Sync
UsernamePassword
Basic auth proposal: Pass
client IP, protocol, device name