SOLVED

Setup up autoDiscover In On-Perm DNS to integrate with O365

%3CLINGO-SUB%20id%3D%22lingo-sub-1511853%22%20slang%3D%22en-US%22%3ESetup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1511853%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3EI'm%20am%20moving%20all%20mailboxes%20to%20O365%20using%20cutover%20method%20.%3C%2FP%3E%3CP%3Ebut%20my%20main%20concern%20is%20the%20way%20that%20On-perm%20outlook%20clients%20will%20connect%20to%20O365.%3C%2FP%3E%3CP%3EI%20am%20aware%20that%20outlook%20uses%20autodiscover%20%2C%20SRV%20Record%20and%20CNAme%20record%20to%20perform%20auto%20discover%20to%20O365%20.%20currently%20On%20Perm%20Exchange%20XML%20files%20are%20located%20at%20Mail.MyDomain.com%20and%20there%20is%20DNS%20entry%20record%20on%20my%20internal%20DNS%20which%20points%20to%20a%20local%20IP%20address%20.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ewould%20it%20be%20enough%20to%20change%20the%20Local%20IP%20address%20for%20DNS%20entry%20mail.MyDomain.com%20to%20O365%20IP%20address%20instead%3F%20and%20if%20the%20answer%20is%20yes%20%2C%20do%20I%20need%20to%20add%20SRV%20and%20CNAMe%20to%20my%20internal%20DNS%20as%20well%20as%20External%20DNS%20to%20point%20to%20O365%3F%20and%20if%20I%20do%20that%20do%20I%20need%20to%20crate%20autodiscover.xml%20file%20O365%20manually%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20I%20need%20to%20redirect%20mail.Mydomain.com%20to%20autodiscover.MyDomain.com%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYour%20Help%20is%20much%20appreciated%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1511853%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Network%20Connectivity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOn-Premises%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1512583%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1512583%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F721031%22%20target%3D%22_blank%22%3E%40hntaurus%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20you%20would%20need%20to%20do%20when%20your%20mailboxes%20are%20in%20Exchange%20Online%20is%20to%20change%20the%26nbsp%3B%3CSTRONG%3EserviceBindingInformation%26nbsp%3B%3C%2FSTRONG%3Eparameter%20of%20the%20service%20connection%20point%20in%20either%20ADSI%20Edit%20or%20AD%20Sites%20and%20Services.%26nbsp%3B%20The%20link%20below%20shows%20how%20to%20do%20that.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fie%2Fen-US%2F5b0ab7b5-fb73-41f8-a0fa-5753308cf195%2Fsteps-to-remove-scp-from-adsi-edit%3Fforum%3Dwinserver8gen%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fie%2Fen-US%2F5b0ab7b5-fb73-41f8-a0fa-5753308cf195%2Fsteps-to-remove-scp-from-adsi-edit%3Fforum%3Dwinserver8gen%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20SCP%20can%20be%20set%20to%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fautodiscover.outlook.com%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%3CSTRONG%3Ehttps%3A%2F%2Fautodiscover.outlook.com%3C%2FSTRONG%3E%3C%2FA%3E%3CSPAN%3E%3CSTRONG%3E%2Fautodiscover%2Fautodiscover.xml%26nbsp%3B%3C%2FSTRONG%3Eand%20this%20should%20take%20care%20of%20autodiscover%20for%20any%20Outlook%20clients%20inside%20your%20network.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1514286%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1514286%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20a%20lot%20for%20your%20prompt%20reply%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20I%20need%20to%20create%20SRV%20and%20CNAME%20for%20that%20auto%20discover%20on%20my%20Internal%20DNS%20as%20well%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1514546%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1514546%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F721031%22%20target%3D%22_blank%22%3E%40hntaurus%3C%2FA%3E%26nbsp%3Bplease%20use%20Exchange%20Management%20Shell%20to%20change%20it%2C%20not%20ADSIEDIT%20%3B)%3C%2Fimg%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EGet-ClientAccessServer%20%7C%20Set-ClientAccessServer%20-AutoDiscoverServiceInternalUri%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fautodiscover.outlook.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fautodiscover.outlook.com%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EDisable-OutlookAnywhere%20%E2%80%93Server%20%3CSERVERNAME%3E%3C%2FSERVERNAME%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EYou%20only%20have%20to%20change%2Fadd%20the%20CNAME%20record%20in%20your%20external%20DNS%20after%20migration.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1514604%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1514604%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F65976%22%20target%3D%22_blank%22%3E%40Dominik%20Hoefling%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGood%20call%20I%20agree%2C%20I%20would%20avoid%20using%20ADSIEdit%20unless%20you%20absolutely%20have%20no%20choice.%26nbsp%3B%20The%20Exchange%20Shell%20method%20is%20absolutely%20the%20way%20to%20go.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1514818%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1514818%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F65976%22%20target%3D%22_blank%22%3E%40Dominik%20Hoefling%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20a%20lot%20for%20your%20time%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20see%20you%20mentioned%20a%20command%20about%20Outlook%20Anyehre%3C%2FP%3E%3CP%3EDO%20I%20need%20to%20disable%20that%20one%20as%20well%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1514824%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1514824%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESure%2C%20I'll%20do%20it%20from%20exchange%3C%2FP%3E%3CP%3Eand%20I%20guess%20by%20doing%20that%20I%20should%20not%20be%20worried%20about%20outloook%20clients%20finding%20the%20right%20path%20to%20connect%20to%20O365%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1515138%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1515138%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F721031%22%20target%3D%22_blank%22%3E%40hntaurus%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%20that%20should%20do%20the%20trick%20for%20you%20with%20internal%20autodiscover.%26nbsp%3B%20Any%20of%20the%20mentioned%20methods%20to%20alter%20the%20service%20connection%20point%20will%20work%2C%26nbsp%3B%20but%20it%20was%20correct%20to%20point%20out%20that%20ADSIEdit%20is%20the%20least%20desirable%20way%20to%20do%20it%2C%20as%20you%20can%20very%20easily%20mess%20things%20up%20in%20there%20if%20you%20don't%20know%20your%20way%20around.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1515149%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1515149%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F721031%22%20target%3D%22_blank%22%3E%40hntaurus%3C%2FA%3E%26nbsp%3BYes%2C%20you%20should%20do%20that%20as%20well%20to%20avoid%20your%20clients%20connecting%20to%20the%20old%20namespace%20after%20migration.%20In%20fact%2C%20you%20don't%20need%20this%20anymore%20and%20after%20your%20cutover%2C%20you%20can%20decommission%20Exchange%20as%20well.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1515336%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1515336%22%20slang%3D%22en-US%22%3EMuch%20appreciated%20%2C%20Thank%20you%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1530809%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1530809%22%20slang%3D%22en-US%22%3EHi%20Dominik%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20have%20fully%20hybrid%20env%20with%20exch2010%2C%20and%20I%20just%20run%20AutoDiscoverServiceInternalUri%20%24Null%3CBR%20%2F%3ESo%20how%20do%20I%20retrieve%20old%20value%3F%3CBR%20%2F%3E%3CBR%20%2F%3ETA%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1534019%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1534019%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F644958%22%20target%3D%22_blank%22%3E%40aussupport%3C%2FA%3E%26nbsp%3Bwhat%20do%20you%20want%20to%20achieve%3F%20The%20old%20value%20is%20often%20your%20Autodiscover%20URL%20e.%20g.%20%3CA%20href%3D%22https%3A%2F%2Fautodiscover.domain.tld%2FAutodiscover%2FAutodiscover.xml%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fautodiscover.domain.tld%2FAutodiscover%2FAutodiscover.xml%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1561017%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1561017%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F65976%22%20target%3D%22_blank%22%3E%40Dominik%20Hoefling%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20is%20not%20setup%20like%20that%20and%20just%20need%20to%20know%20the%20way%20of%20identifying%20the%20old%20value%3F%20We%20have%20different%20regions%20and%20load%20balancers%20so%20DNS%20got%20auotdiscover-Nz%2C%20autodisocover-aus%2Cand%20autodiscover-us%20etc%20etc..%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1562184%22%20slang%3D%22en-US%22%3ERe%3A%20Setup%20up%20autoDiscover%20In%20On-Perm%20DNS%20to%20integrate%20with%20O365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1562184%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F644958%22%20target%3D%22_blank%22%3E%40aussupport%3C%2FA%3E%26nbsp%3B%20IMHO%20there%20is%20no%20option%2Fcmdlet%20to%20revert%20the%20value%20back%20to%20the%20old%20one.%20It%20would%20be%20good%20for%20a%20complex%20environment%20like%20yours%20to%20have%20a%20look%20at%20your%20documentation.%20I%20don't%20know%20what%20you%20mean%20with%20different%20sites%20but%20maybe%20this%20helps%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fexchange%2Fset-clientaccessserver%3Fview%3Dexchange-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fexchange%2Fset-clientaccessserver%3Fview%3Dexchange-ps%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDon't%20mix%20up%20the%20value%20with%20AutoDiscoverSiteScope%20you%20mentionend%20in%20your%20post.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello

I'm am moving all mailboxes to O365 using cutover method .

but my main concern is the way that On-perm outlook clients will connect to O365.

I am aware that outlook uses autodiscover , SRV Record and CNAme record to perform auto discover to O365 . currently On Perm Exchange XML files are located at Mail.MyDomain.com and there is DNS entry record on my internal DNS which points to a local IP address .

 

would it be enough to change the Local IP address for DNS entry mail.MyDomain.com to O365 IP address instead? and if the answer is yes , do I need to add SRV and CNAMe to my internal DNS as well as External DNS to point to O365? and if I do that do I need to crate autodiscover.xml file O365 manually?

 

Do I need to redirect mail.Mydomain.com to autodiscover.MyDomain.com ?

 

Your Help is much appreciated

 

13 Replies

@hntaurus 

 

What you would need to do when your mailboxes are in Exchange Online is to change the serviceBindingInformation parameter of the service connection point in either ADSI Edit or AD Sites and Services.  The link below shows how to do that.

 

https://social.technet.microsoft.com/Forums/ie/en-US/5b0ab7b5-fb73-41f8-a0fa-5753308cf195/steps-to-r...

 

The SCP can be set to 

https://autodiscover.outlook.com/autodiscover/autodiscover.xml and this should take care of autodiscover for any Outlook clients inside your network.

 

@PeterRising 

Thanks a lot for your prompt reply

 

Do I need to create SRV and CNAME for that auto discover on my Internal DNS as well?

 

@hntaurus please use Exchange Management Shell to change it, not ADSIEDIT ;)

 

Get-ClientAccessServer | Set-ClientAccessServer -AutoDiscoverServiceInternalUri https://autodiscover.outlook.com

 

Disable-OutlookAnywhere –Server <ServerName>

 

You only have to change/add the CNAME record in your external DNS after migration.

@Dominik Hoefling 

 

Good call I agree, I would avoid using ADSIEdit unless you absolutely have no choice.  The Exchange Shell method is absolutely the way to go.  

@Dominik Hoefling 

Thanks a lot for your time

 

I see you mentioned a command about Outlook Anyehre

DO I need to disable that one as well?

@PeterRising 

Sure, I'll do it from exchange

and I guess by doing that I should not be worried about outloook clients finding the right path to connect to O365 ?

@hntaurus 

 

Yes that should do the trick for you with internal autodiscover.  Any of the mentioned methods to alter the service connection point will work,  but it was correct to point out that ADSIEdit is the least desirable way to do it, as you can very easily mess things up in there if you don't know your way around.

Best Response confirmed by hntaurus (Occasional Contributor)
Solution

@hntaurus Yes, you should do that as well to avoid your clients connecting to the old namespace after migration. In fact, you don't need this anymore and after your cutover, you can decommission Exchange as well.

Much appreciated , Thank you
Hi Dominik,

I have fully hybrid env with exch2010, and I just run AutoDiscoverServiceInternalUri $Null
So how do I retrieve old value?

TA

@aussupport what do you want to achieve? The old value is often your Autodiscover URL e. g. https://autodiscover.domain.tld/Autodiscover/Autodiscover.xml

@Dominik Hoefling 

 

It is not setup like that and just need to know the way of identifying the old value? We have different regions and load balancers so DNS got auotdiscover-Nz, autodisocover-aus,and autodiscover-us etc etc..

 

As

@aussupport  IMHO there is no option/cmdlet to revert the value back to the old one. It would be good for a complex environment like yours to have a look at your documentation. I don't know what you mean with different sites but maybe this helps: https://docs.microsoft.com/en-us/powershell/module/exchange/set-clientaccessserver?view=exchange-ps

 

Don't mix up the value with AutoDiscoverSiteScope you mentionend in your post.