Is it possible to create a hybrid from on-premise Exchange to 2 separate 365 tenancies?

%3CLINGO-SUB%20id%3D%22lingo-sub-1431280%22%20slang%3D%22en-US%22%3EIs%20it%20possible%20to%20create%20a%20hybrid%20from%20on-premise%20Exchange%20to%202%20separate%20365%20tenancies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431280%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20working%20with%20a%20customer%2C%20a%20college%2C%20where%20they%20currently%20use%20a%20single%20AD%2FExchange%20Forest%20running%20as%20a%20hybrid%20to%20a%20365%20tenant.%26nbsp%3B%20The%20setup%20includes%20two%20separate%20colleges%2C%20managed%20by%20a%20single%20IT%20team%2C%20which%20they%20now%20want%20to%20separate%20into%202%20tenants%2C%20but%20retaining%20a%20single%20on%20premise%20AD%3C%2FP%3E%3CP%3EI%20know%20we%20can%20split%20OUs%20and%20sync%20different%20areas%20of%20one%20AD%20using%20AAD%20Connect%20to%20the%202%20tenants%2C%20but%20I%20have%20seen%20conversations%20that%20you%20can%20only%20run%20a%20hybrid%20to%20a%20single%20Exchange%20tenant%20from%20our%20on%20premise%20forest.%26nbsp%3B%20Has%20anyone%20tried%20this%3F%3C%2FP%3E%3CP%3EIf%20I%20can't%20run%20the%20HCW%20twice%2C%20once%20for%20each%20tenant%2C%20I%20can't%20see%20how%20I%20will%20be%20able%20to%20create%2Fmanage%20users%20in%20the%20non-hybridised%20tenant%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1431280%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1431581%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20it%20possible%20to%20create%20a%20hybrid%20from%20on-premise%20Exchange%20to%202%20separate%20365%20tenancies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431581%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F351002%22%20target%3D%22_blank%22%3E%40AndyTuke%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fpractical365.com%2Fblog%2Fexchange-multi-forest-hybrid-tips-and-tricks%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fpractical365.com%2Fblog%2Fexchange-multi-forest-hybrid-tips-and-tricks%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEDIT%20-%20I%20posted%20this%20and%20then%20realised%20you%20were%20asking%20for%20the%20opposite.%20%26nbsp%3BSorry%20about%20that.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1431619%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20it%20possible%20to%20create%20a%20hybrid%20from%20on-premise%20Exchange%20to%202%20separate%20365%20tenancies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431619%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F351002%22%20target%3D%22_blank%22%3E%40AndyTuke%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAn%20older%20article%20on%20the%20subject%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.allabout365.com%2F2014%2F03%2Fusing-multiple-office-365-tenants-with-a-single-active-directory%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.allabout365.com%2F2014%2F03%2Fusing-multiple-office-365-tenants-with-a-single-active-directory%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20not%20been%20able%20to%20find%20much%20else%2C%20and%20it's%20not%20a%20scenario%20I've%20ever%20tried%20or%20considered.%20%26nbsp%3BWhether%20or%20not%20it%20is%20possible%20however%2C%20I%20don't%20think%20it's%20particularly%20desirable.%20%26nbsp%3BHappy%20to%20be%20corrected%20if%20anyone%20knows%20better%20though%20of%20course.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1431908%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20it%20possible%20to%20create%20a%20hybrid%20from%20on-premise%20Exchange%20to%202%20separate%20365%20tenancies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431908%22%20slang%3D%22en-US%22%3EHi%20Andy%2C%3CBR%20%2F%3E%3CBR%20%2F%3EOn%20the%20technical%20side%2C%20yes%20it's%20possible%20but%20you%20will%20need%20to%20create%20everything%20manually%20from%20the%20inbound%20and%20outbound%20connectors%20to%20the%20organization%20trusts%20and%20onmicrosoft.com%20mailbox%20aliases.%20As%20you%20said%20yourself%20the%20HCW%20takes%20care%20of%20this%20and%20Microsoft%20won't%20support%20this%20kind%20of%20scenario%20as%20well.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1431927%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20it%20possible%20to%20create%20a%20hybrid%20from%20on-premise%20Exchange%20to%202%20separate%20365%20tenancies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431927%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Andy%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20have%20one%20Active%20Directory%20and%20you%20configured%202%20UPN%20Suffixes%20(Domains)%20on%20that%20Active%20Directory%2C%20and%20you%20need%20to%20have%20O365%20tenant%20for%20each%20UPN%20suffix%20separately.%20Yes%20you%20can.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20have%20to%20install%202%20VMs%20or%20servers%20in%20your%20on-premises%20infrastructure%20and%20Install%202%20Azure%20AD%20Connect%20servers%20and%20link%20each%20Azure%20AD%20Connect%20server%20to%20one%20of%20the%20UPN%20suffix%20and%20link%20each%20Azure%20AD%20Connect%20server%20to%20an%20O365%20tenant.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20have%20to%20be%20sure%20the%20following%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1)%20you%20configured%20each%20Domain%20on%20a%20separate%20O365%20tenant%20and%20the%20domain%20is%20verified.%26nbsp%3B%3C%2FP%3E%3CP%3E2)%20To%20have%20the%20appropriate%20licenses%26gt%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F351002%22%20target%3D%22_blank%22%3E%40AndyTuke%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I am working with a customer, a college, where they currently use a single AD/Exchange Forest running as a hybrid to a 365 tenant.  The setup includes two separate colleges, managed by a single IT team, which they now want to separate into 2 tenants, but retaining a single on premise AD

I know we can split OUs and sync different areas of one AD using AAD Connect to the 2 tenants, but I have seen conversations that you can only run a hybrid to a single Exchange tenant from our on premise forest.  Has anyone tried this?

If I can't run the HCW twice, once for each tenant, I can't see how I will be able to create/manage users in the non-hybridised tenant?

 

4 Replies
Highlighted

@AndyTuke 

 

https://practical365.com/blog/exchange-multi-forest-hybrid-tips-and-tricks/

 

EDIT - I posted this and then realised you were asking for the opposite.  Sorry about that.

@AndyTuke 

 

An older article on the subject - https://www.allabout365.com/2014/03/using-multiple-office-365-tenants-with-a-single-active-directory...

 

Have not been able to find much else, and it's not a scenario I've ever tried or considered.  Whether or not it is possible however, I don't think it's particularly desirable.  Happy to be corrected if anyone knows better though of course.

Highlighted
Hi Andy,

On the technical side, yes it's possible but you will need to create everything manually from the inbound and outbound connectors to the organization trusts and onmicrosoft.com mailbox aliases. As you said yourself the HCW takes care of this and Microsoft won't support this kind of scenario as well.
Highlighted

Hi Andy,

 

If you have one Active Directory and you configured 2 UPN Suffixes (Domains) on that Active Directory, and you need to have O365 tenant for each UPN suffix separately. Yes you can. 

You have to install 2 VMs or servers in your on-premises infrastructure and Install 2 Azure AD Connect servers and link each Azure AD Connect server to one of the UPN suffix and link each Azure AD Connect server to an O365 tenant. 

 

You have to be sure the following

 

1) you configured each Domain on a separate O365 tenant and the domain is verified. 

2) To have the appropriate licenses>

 

 

@AndyTuke