IM

AP

mig

rati

on

Cu

tover

mig

rati

on

Sta

ged

mig

rati

on

20

10

Hyb

rid

20

13

Hyb

rid

Exchange 5.5

Exchange 2000

Exchange 2003

Exchange 2007

Exchange 2010

Exchange 2013

Notes/Domino

GroupWise

Other

Sim

ple

Mig

rati

on

s H

yb

rid

IMAP Migration Supports wide range of email platforms

Email only (no calendar, contacts, or tasks)

Cutover Exchange Migration (CEM)

Good for fast, cutover migrations

No migration tool or computer required on-premises

Staged Exchange Migration (SEM)

No migration tool or computer required on-premises

Requires Directory Synchronization with on-premises AD

Hybrid Deployment

Manage users on-premises and online

Enables cross-premises calendaring, smooth migration, and easy off-boarding

• Delegated authentication for on-premises/cloud web services

• Enables Free/Busy, calendar sharing, message tracking, online

archive, and more Federation Trust

• Manage all of your Exchange functions, whether cloud or on-

premises from the same place - Exchange Administration

Center (EAC)

Integrated Admin

Experience

• Online mailbox moves

• Preserve the Outlook profile and offline file (OST)

• Leverages the Mailbox Replication Service (MRS)

Native Mailbox

Move

• Authenticated and encrypted mail flow

• Preserves the internal Exchange messages headers

• Support for compliance mail flow scenarios (central transport) Secure Mail Flow

2. Deploy Exchange 2013 servers

Install both E2013 MBX and CAS servers

Install E2010 EDGE servers

Set an ExternalUrl for the Exchange Web Services vdir

E2010 or

2007 Hub

Internet facing site

Intranet site

Exchange 2010

or 2007 Servers

1. Prepare

Install Exchange SP and/or updates across the ORG

Prepare AD with E2013 schema

4. Publish protocols externally

Create public DNS A records for the EWS and SMTP

endpoints

Validate using Remote Connectivity Analyzer

5. Switch autodiscover namespace to E2013 CAS

Change the public autodiscover DNS record to resolve

to E2013 CAS

6. Run the Hybrid Configuration

Wizard

E2013

CAS

3. Obtain and Deploy Certificates

Obtain and deploy certificates on E2013 MBX and CAS

servers & E2010 EDGE servers

Clients autodiscover.contoso.com

mail.contoso.com

1 2

3

4

5

6

E2010 or

2007 CAS

E2010

or 2007

MBX

E2013

MBX

SP/RU

SP/RU

Office 365

7. Move mailboxes

Autodiscover &

EWS SMTP

E2010

EDGE

7

Perimeter Network

ADFS 2.0

Proxy

Active

Directory

ADFS 2.0

ADFS 2.0

ADFS 2.0

Proxy

Load balancer Load balancer

Internal Network

Basic Authentication

(Active Profile)

Passive Federation

(Passive Profile)

Number of users Minimum number of servers

Fewer than 1,000 users 0 dedicated federation servers

0 dedicated federation server proxies 1 dedicated NLB server

1,000 to 15,000 users 2 dedicated federation servers 2 dedicated federation server proxies

15,000 to 60,000 users Between 3 and 5 dedicated federation servers At least 2 dedicated federation server proxies

On-Premises

Identity

Services

Provisioning

platform

Active Directory

Federation

Server 2.0

Trust

Directory

Store

Admin Portal/

PowerShell

Authentication

platform

MSOL PowerShell

Module

Office 365

Add Domain

Required

TXT/MX Record

Add Trust

- Claim Rules

- User Source ID = AD ObjectGUID

Verify-Domain

- Active/Mex/Passive

- Token certs Current/Next

- Brand URI etc

Update

Lync 2010/Office Subscription

Active Sync

Corporate Boundary

Exchange Online

AD FS 2.0Server

MEX

Web

Active

AD FS 2.0 Proxy

MEX

Web

Active

Outlook 2010/2007IMAP/POP

UsernamePassword

UsernamePassword

OWAInternal

Lync 2010/Office Subscription

Outlook 2010/2007IMAP/POP

OWAExternal

UsernamePassword

Active Sync

UsernamePassword

Basic auth proposal: Pass

client IP, protocol, device name