Forum Discussion

najwan's avatar
najwan
Copper Contributor
Nov 22, 2023

Exchnage Cutover Migration to office 365

Hi there,

 

I am checking the exchange cutover migration from on-premises  to exchange online and all the steps are clear for me.

I just have one question that i did not find a clear answer for it.

when starting the migration batch it will provision the users in office 365, what will be the initial password of the users?

 

Thanks

  • Hi najwan,
    cut over migration means that you have not set up an AAD sync before, right?
    In order for users to be able to use the same password from the AD in the cloud, it must be synchronized.
    Alternatively, you can set a new one for each user, which will then of course be different from the AD password.
    There are two possible scenarios for the migration:
    1. setting up the AAD Connect and migrating the mailboxes via the hybrid configuration
    2. cutover migration and subsequent synchronization via AAD Connect with manual effort
    I would recommend mapping scenario one. You can still switch the mailflow to M365 afterwards.

    • najwan's avatar
      najwan
      Copper Contributor
      Hi Philip,
      yes we don't AAD connect...
      in case i want to follow Microsoft approach and to not have AADConnect, just to understand how it works, when provisioning the users in the cloud while doing the cutover migration this is an automated task will be completed when starting the migration batch.

      The question, how the provisioned user is created and what will be the password or i have to go and reset the passwords of all provisioned users?
    • najwan's avatar
      najwan
      Copper Contributor

      Kidd_Ip 

       

      Hello and thanks for your reply...

       

      Currently we don't have any connection to M365  and the AZure AD connect is not installed.

  • BarryGoblon's avatar
    BarryGoblon
    Iron Contributor

    najwan, when you move your email from your on-premises server to Exchange Online, users will keep their existing passwords. They won't need to create new passwords when they first log in to Exchange Online.

     

    The reason users don't need to reset their passwords is because the migration process copies over their existing password information. When they log in to Exchange Online, their password is checked against the same information stored in their on-premises server. This ensures a smooth transition without any password hassles for your users.

     

    In the situation, when you want to change the initial password for users, you can do so after the migration is complete. My recommendation is to use the Set-MsolUserPassword cmdlet in PowerShell to reset the password for individual users, or you can use the Azure Active Directory PowerShell for Graph module to reset the password for multiple users, for example it can look like this:

     

    Set-MsolUserPassword -UserPrincipalName email address removed for privacy reasons -NewPassword (ConvertTo-SecureString -AsPlainText "newPassword" -Force)

     

    To reset the password for multiple users using the Azure Active Directory PowerShell for Graph module, apply this:

     

    $users = Import-Csv -Path "C:\Users.csv"
    foreach ($user in $users) {
    $newPassword = $user.NewPassword
    Set-AzureADUserPassword -ObjectId $user.ObjectId -NewPassword (ConvertTo-SecureString -AsPlainText $newPassword -Force)
    }

     

    One more recommendation is to use some backup software, in my case it's nakivo, and also keep in mind, that resetting the password for users will require them to create a new password the next time they log in to Office 365.

Resources