Forum Discussion

Copper Contributor

Feb 18, 2021

Exchange Hybrid new domain

Hi We have a requirement to add a new domain name and I’m unsure if I need to add the domain name to the SAN certificate? Our setup: Exchange 2016 cu17 hybrid Central mail routing is enabled (...

Brass Contributor

Feb 18, 2021

Psshutdown
You probably should, if there might be a need to configure TLS with partner.
What is the domain will be used for?

Psshutdown

Copper Contributor

Feb 19, 2021

The domain will be used as a primary emails for some users.

1. I understand the domain needs to be verified,
2. Run the hybrid wizard and select the new domain
3. Add this to on-prem exchange

VickVega
Brass Contributor
Feb 19, 2021
Psshutdown
Yes, that is the must, here are the https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain.
If you changing the name space:
Add mail.newdomain.com and autodiscover.domain.com to UCC SAN certificate containing other domains.
Potentially re-do virtual directories.
New DNS zone SPF MX , Autodiscover, records for the new domain.
Add custom domain in Azure, verify.
Add domain under Accepted Domains in on-prem Exchange.
Add email address policy in on-prem Exchange. (should be lastest or n-1 CU version)
Apply email address policy to users
Validate AADConnect replication status
Validate mail flow.
Change user UPNs to new domain?