Home

Protecting Exchange 2016 with Azure Active Directory

%3CLINGO-SUB%20id%3D%22lingo-sub-304196%22%20slang%3D%22en-US%22%3EProtecting%20Exchange%202016%20with%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-304196%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20recently%20had%20multiple%20customers%20who%20can't%20move%20some%2Fall%20of%20their%20mailboxes%20to%20Exchange%20Online%20and%20are%20instead%20moving%20to%20Exchange%202016%2F2019%20on-premises%2C%20but%20would%20still%20like%20to%20make%20use%20of%20the%20identity%2Fsecurity%20features%20provided%20by%20the%20Microsoft%20cloud%2C%20so%20I%20wrote%20a%20series%20of%20blogs%20showing%20how%20Hybrid%20Modern%20Authentication%2C%20along%20with%20Azure%20AD%20Conditional%20Access%20and%20Azure%20Application%20Proxy%20could%20be%20used%20to%20secure%20an%20on-premises%20Exchange%202016%20organisation.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmikeparker365.wordpress.com%2F2018%2F09%2F17%2Fhow-to-secure-exchange-2016-with-azure-ad-part-1-authenticating-owa-with-kerberos%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%3Ehttps%3A%2F%2Fmikeparker365.co.uk%2F2018%2F09%2F17%2Fhow-to-secure-exchange-2016-with-azure-ad-part-1-authenticating-owa-with-kerberos%2F%26nbsp%3B%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmikeparker365.wordpress.com%2F2018%2F09%2F19%2Fhow-to-secure-exchange-2016-with-azure-ad-part-2-hybrid-modern-authentication%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmikeparker365.wordpress.com%2F2018%2F09%2F19%2Fhow-to-secure-exchange-2016-with-azure-ad-part-2-hybrid-modern-authentication%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmikeparker365.wordpress.com%2F2018%2F09%2F25%2Fhow-to-secure-exchange-2016-with-azure-ad-part-3-azure-application-proxy%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmikeparker365.wordpress.com%2F2018%2F09%2F25%2Fhow-to-secure-exchange-2016-with-azure-ad-part-3-azure-application-proxy%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20is%20an%20interesting%20read%2C%20let%20me%20know%20if%20you%20have%20any%20questions%2C%20comments%20or%20corrections!%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMike%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-304196%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eapplication%20proxy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%20Modern%20Authentication%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-305806%22%20slang%3D%22en-US%22%3ERe%3A%20Protecting%20Exchange%202016%20with%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-305806%22%20slang%3D%22en-US%22%3EHi%20Andrew%2C%3CBR%20%2F%3EThanks%20for%20the%20positive%20feedback!%20Glad%20you%20found%20them%20helpful.%3CBR%20%2F%3EMike%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-305779%22%20slang%3D%22en-US%22%3ERe%3A%20Protecting%20Exchange%202016%20with%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-305779%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20series%20of%20articles.%20I%20have%20bookmarked%20them%20in%20my%20collection%20of%20links%20and%20will%20be%20adding%20your%20solution%20to%20my%20Exchange%20deployment%20cookbook.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Mike Parker
Contributor

I've recently had multiple customers who can't move some/all of their mailboxes to Exchange Online and are instead moving to Exchange 2016/2019 on-premises, but would still like to make use of the identity/security features provided by the Microsoft cloud, so I wrote a series of blogs showing how Hybrid Modern Authentication, along with Azure AD Conditional Access and Azure Application Proxy could be used to secure an on-premises Exchange 2016 organisation. 

 

https://mikeparker365.co.uk/2018/09/17/how-to-secure-exchange-2016-with-azure-ad-part-1-authenticati...

https://mikeparker365.wordpress.com/2018/09/19/how-to-secure-exchange-2016-with-azure-ad-part-2-hybr...

https://mikeparker365.wordpress.com/2018/09/25/how-to-secure-exchange-2016-with-azure-ad-part-3-azur...

 

Hope this is an interesting read, let me know if you have any questions, comments or corrections! 

 

Mike

2 Replies

Great series of articles. I have bookmarked them in my collection of links and will be adding your solution to my Exchange deployment cookbook.

Hi Andrew,
Thanks for the positive feedback! Glad you found them helpful.
Mike
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
30 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies