Protecting Exchange 2016 with Azure Active Directory

I've recently had multiple customers who can't move some/all of their mailboxes to Exchange Online and are instead moving to Exchange 2016/2019 on-premises, but would still like to make use of the identity/security features provided by the Microsoft cloud, so I wrote a series of blogs showing how Hybrid Modern Authentication, along with Azure AD Conditional Access and Azure Application Proxy could be used to secure an on-premises Exchange 2016 organisation. 

https://mikeparker365.co.uk/2018/09/17/how-to-secure-exchange-2016-with-azure-ad-part-1-authenticating-owa-with-kerberos/ 

https://mikeparker365.wordpress.com/2018/09/19/how-to-secure-exchange-2016-with-azure-ad-part-2-hybrid-modern-authentication/

https://mikeparker365.wordpress.com/2018/09/25/how-to-secure-exchange-2016-with-azure-ad-part-3-azure-application-proxy/

Hope this is an interesting read, let me know if you have any questions, comments or corrections! 

Mike