Forum Discussion

Karljohan's avatar
Karljohan
Copper Contributor
Apr 23, 2020
Solved

How to edit Exchange Online attributes for a tenant with AD-Sync with ease

Hi, I have a question regarding managing O365 attributes that does not exist in an on-prem AD when using AD-Sync. Surely there must be tons of companies with a Microsoft AD that has never had their ...
  • PeterRising's avatar
    Apr 23, 2020

    Karljohan 

     

    Hi, when you synchronise your on-premises AD to Azure AD with AADC, it is Microsoft recommended/supported practice to install an Exchange 2016 management server and configure hybrid co-existence.  If you have O365 Enterprise licensing, then you will qualify for a free Exchange 2016 hybrid licence key.  This is conditional on no mailboxes being present on the server.  This is the best way to manage attributes such as secondary email addresses in a hybrid identities methodology.

     

    However, it is also possible (but not really recommended) to manage on-premises attributes without the Exchange Management server by using either ADSI edit (to be used with great caution), or by enabling Advanced Features in AD Users and computers, which will enable the attribute editor tab in the user properties.  These methods will allow you to add and remove smtp addresses by modifying the proxy addresses filter setting.

     

    I highly recommend the first option, as it is free to setup if you have O365 E1 or E3 licences and offers far more control of those attributes which must be managed on-prremises.  You just need to spin up a server to install Exchange 2016 on (which may require a schema update), and then you can run the Hybrid Configuration Wizard.