Challenging Task - Two Domains - Two Office 365 Service

Hi All,
We have a challenging task ahead of us at my small company and we are trying to figure out the best way to do things.
A quick summary of the situatoin
We are ABC.COM and we sit in XYZ.COM's building with their own infrastructure. We log into their domain, etc.
We currently use abc.com's Office 365 Services with just a different smtp address set per account.
5 out of the 20 people who work for ABC.COM use XYZ.COM as their primary SMTP address. (this is required for business purposes since it is our parent company and they leverage their powerful name).
We are isolating ABC.COM and building a whole new virtual/cloud infrastructure and signing up for their own Office 365 Service.
Our Challenge:
5 of the 20 still need to send and receive as XYZ.COM but we want them to log into our newly created Domain / Virtual Environment and also still access XYZ.COM's Intranet Site (for benefits, forms, since its our parent company).
How would we go about doing this cleanly?
We have some general ideas but we've been thinking of situations that may cause problems like Account Lockouts for those 5 individuals or passwords expiring on XYZ.COM (there is no way we can set ourselves to never expire).
I really hope this is clear and we're just looking to do this correctly.
Now, we have different opinions on how this should be done but I'm curious if anyone has come across this before and what they have done successfully. We can't afford to do this and then find major issues down the line.
Thanks,
Patrick

just give them OWA access or create a trust between two org.,
Where Technology Meets Talent

Similar Messages

Two domains + two servers + one static IP address = DNS confusion

I'll try to keep this simple:
I have two domains, two mac mini SL servers, one airport extreme, and multiple static IPs, but only one of them pointing to the router. I've configured DNS successfully for the primary domain (example1.com) and thought that I had set up a second primary zone for the second domain (example2.com) but all external requests point to example1.com.
So the two setups i've tried are:
Reverse zone
1.0.10.in-addr.arpa.
- 10.0.1.200 - example1.com
- 10.0.1.201 - example2.com
Primary zone
example1.com
- example1.com - 10.0.1.200
- example2.com - 10.0.1.201
OR
Primary zone 1
example1.com
- example1.com - 10.0.1.200
Primary zone 2
example2.com
- example2.com - 10.0.1.201
Does anyone know of a good tutorial for hosting multiple servers in an internal network, pointing to one name server internally? I've looked everywhere and cannot make sense of the issue.
Thanks in advance.

After sleeping on it, I came up with a much easier solution that works better for what I'd planned in the first place. I hung a spare router off my gateway and set up a completely different network for the second server and everything is great now. I knew there was a reason I'd signed up for five IPs...
In any event, I don't think I would've been able to accomplish what I was trying to do while using the Airport Extreme as my firewall. I wanted to have separate static IPs for each of the boxes and obviously I couldn't do that with the airport, although it took a while for me to recognize that.
thanks for the suggestion, though. I think I'm going to use that for some subdomains.

Iphone 4s creates duplicate contacts after connecting to office 365 services

I have a client that has an iphone 4s after she synchronized her iphone with an office 365 online services account(its exchange 2010).
now the phone keep creating duplicate contacts (even after I delete them they keep apearing).
microsoft says its an apple problem what can be done?
thanks
rotem

In Mid-August, 2012, this problem still continues and I am unaware any fix to the problem.
I am running iOS 5.1 on iPhone 4S
Outlook (Hosted Exchange) 365
WIndows 7
Outlook 2010 client
Initial setup:
Contacts clean and no duplicates in Hosted Exchange & Outlook 2010
Zero contacts in the iPad and iPhone before syncing with Exchange services
Same condition with iPhone
Same condition with iPad
iTunes not involved, no syncing ever (and no [email protected] ever created.)
iCloud Mail, Contacts, Calendar, Notes all turned off
Connected with Exchange with legit user name, password and server domain, togel soft switches on the Exchange Mail, Contacts, Calenday and Labels/Reminders.
iPhone receives synced contacts (and email and calendar and notes) from Exchange Active Sync
User is fine until he/she searches for a contact via iOS device.
As searches continue , user believes that Contacts crash (quit unexpectedly and return to main iOS app page.
Duplicates begin to display on the iOS device that Contacts crashed on.
IF the user then edits one of the phantom duplicate contacts, the record duplicatiuon begins to grow in Outlook Contacts. But if no pantom editing happens, the duplications continues only on the iOS device and the contacts begin to appear in tripples and more .
If you are having this problem, please post it, so that if Apple ever reads these boards, they see the problem is not isolated to a few and they begin to understand that the iOS devices will be jetisoned from enterprise customers because problems like this should be acknoledged and resolved on a MUCH more timely manner.

Two domains two computers and the cname

Hello
I have two domains, Do I set both cnames to web.mac.com?
I also want to be able to modify from two computers, Can this be Done?
I set one up on my home computer and the other from my ibook and somehow they got mixed together.

Anybody with any idea?
I see there has been similar problem with no answers. Does this mean it can't be done???
http://discussions.apple.com/thread.jspa?messageID=5512445&#5512445

Two domains, two wikis possible ?

ok so I have two domains on the same server ;
setup domain1.com , created a wiki and went to server prefences, choosen the startup page to WIKI1 ( that wiki ) and everything works like a charm
then I setup domain2.com, create a wiki and want when I go to domain2.com, to have WIKI2 as default page for that domain.
how do I do that ? assign the startup page being a specific wiki for each domain ? virtualhosts are configured ok, everything works like a charm
best regards

Anybody with any idea?
I see there has been similar problem with no answers. Does this mean it can't be done???
http://discussions.apple.com/thread.jspa?messageID=5512445&#5512445

How do i close office 365 service to allow updates to be installed?

During updates for office, i get an error mesage telling me i cannot install them as office365service is open. How can i close it?! please help!

This is from the Microsoft Knowledge Base http://support.microsoft.com/kb/2482074
There is another way you can quit an application. On the Apple menu bar, click Go > Computer, open your hard disk drive (Macintosh HD is the default name), and then open Applications > Utilities > Activity Monitor. Find the application name, click it, and then choose Quit Process.
I found this helpful during the recent Office365 update.

Do you want the application "Office 365 service.app" to accept incoming network

I keep getting this pop up even though I have Office365Service blocked in my firewall. And this happens even when I don't have any MS apps open.

InDesign is phoning home, probably to check for updates of that spam promotion section in the startup screen.
Could also be any plugin activation mechanism, etc.
Go to System Preferences / Security & Privacy / Firewall
If there is an entry for InDesign, change it to something reasonable.
Dirk

Federation of two local domains to one Office 365 domain

Hi,
We want to merge and federate users from two separate local domains to one common Office 365 domain. (Office 365 Faculty E3 license)
Is this possible and which options do we have?
Thanks for comments on this.
regards
Tor

Hi Tor,
This is the forum to discuss questions and feedback for Microsoft Office client. There is not so much about
Office 365 license/server aspects here, I would suggest you to post in the dedicated forum of
Office 365 Community, where you can get more experienced responses:
http://community.office365.com/en-us/f/default.aspx
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Howto deploy a temporary exchange 2013 server for migration between two Office 365 accounts?

Objective:
We plan to migrate our office 365 from our current tennant (E3) to a new tennant (M) to drastically cut our annual costs for the same services, while retaining the mail and group memberships of all our users. This will involve installing an exchange server
to download and upload mail from the old tennant to the new tennant.
Background:
We are a longtime O365 customer, and have been a customer since before the "Midsize business" plans existed. There is no "cookie cutter" migration path from E3 to M. Microsoft currently recommends deploying an MS exchange server and off-boarding
the mailboxes from your E3 subscription and then On-boarding them to a new account under the M plan. As ridiculous as this is, this is indeed the path our company has decided to go. It isn't cool/fair that we're being shackled to the E plans (that are
vastly more expensive) when we're a small/midsize business that has been a longtime customer of O365, while new customers of equal size to us can expect to save over $4000 annually. The services (when compared) offered are nearly identical.
After calling MS support several times for guidance for this issue, I am advised that we should contact a 'partner' and ask for their support in doing this migration. We did as requested and were provided a quote to the tune of approximately $15,000 to do this
migration for us. Obviously this is unacceptable, and thus our business has decided to rely on my abilities to get it done. Again, involving an MS partner is not an option.
Environment:
1 MS AD domain:
- Original FQDN was @contoso.ca of this domain and UPNs were [email protected]
- UPN has been changed to [email protected] to allow for ADFS
- ADFS has been deployed and SSO works for all users with UPN [email protected]
- An "On-Prem exchange server" does not yet exist
1 O365 Account where main tennant FQDN is @corp.com
- There are 5 registered domains
-contoso.ca
-corp.com
- contoso.legacy.ca
-deprecated/will be deleted
-deprecated/will be deleted
- There are 40 E3 licenses, all using a @corp.com UPN
- There are 5 E1 licenses (we acknowledge that these will be upgraded to an M following the migration) that use the UPN contoso.legacy.ca
- No accounts currently use contoso.ca for email
- O365 was upgraded to 'the latest version' sometime in summer 2013.
Migration Plan (High Level):
Setup a local windows server (trial license)
Deploy an exchange 2013 server (trial license) on the aforementioned windows server http://technet.microsoft.com/en-us/evalcenter/hh973395.aspx
  Prepare and deploy Dirsync Deployment
of Dirsync
Add exchange to office 365 and begin replicating the mailboxes from the cloud to the exchange server. Wait for synchronization to complete.
More information: http://technet.microsoft.com/en-us/library/hh534377(v=exchg.150).aspx
http://help.outlook.com/en-us/140/ff633682.aspx
Evaluate total time it took to sync data.
Time it takes to download data to exchange should be relatively similar to time it takes to restore mail to the new service.
Open a new office365 account under the M plan.
  Plan a 1 hour mail & contoso.ca domain login outage
temporarily change all user UPN's to match the new tennant
perform a dirsync to the new tennant
disable dirsync after all accounts have been auto-created/provisioned
re-establish UPN + mail access.
Plan a date and time for the cut over.
remove the exchange hybrid server from the old tennant.
Point MX records directly to the exchange server.
Cut office 365 service.
  After the 30 minutes ~ 1 hour 'mandatory' wait time imposed by MS to 'register' the domain with O365, add @corp.com to
the new tennant
fix all user UPN's in the cloud to match their real UPN's.
This can be done with powershell.
attach exchange hybrid server to new tennant
Point MX records to the new tennant
Migrate all data from the local exchange server to the cloud under the new plan.
Current progress (Lab):
I have created a sandbox (Lab with no internet access or connectivity to production) environment in VMware and cloned the following servers to it:
1x Domain Controller (DC) running windows server 2012 (named DC02)
1x DC running windows server 2008 R2 (named DC01)
1x windows server 2012 R2 - prepped with all the pre-requisites to install exchange 2013. (named EXC01)
Where I am stuck / Problem:
I have installed exchange on the server EXC01 in the lab environment using my account. I am a domain administrator in the contoso.ca domain, but my UPN is [email protected].
After the installation of exchange, I notice that my email address in Active Directory changed from @corp.com to @contoso.ca. By default, I do not see @corp.com to be an available email address to select as my email address, and changing it in AD does not resolve
the problem.
In the exchange portal, I found "Mail flow ---> Accepted Domains", and believe I should add @corp.com to the accepted domain list. Questions:
1) Must I add corp.com and the other domains that exist in office 365 to the local exchange before I go through with the hybrid wizard?
2) If I must add them to exchange, I am provided with three choices:
- Authoritative Domain
- Internal Relay Domain
- External Relay Domain
Given that the domain is currently in office365 and is authoritative there, which of these applies?
3) Most documentation I have found has been about a one way migration from on-prem to the cloud. I have had a hard time finding a step by step guide for cloud to local (new server) and then back to cloud. Does anyone here have any good documentation for this
process? Would love it if it took into consideration multiple UPN/email addresses.

Hi,
Here are my answers you can refer to:
1. Yes, we should select the primary SMTP domain for our organization and any other accepted domains that will be used in the hybrid deployment:
http://technet.microsoft.com/en-us/library/jj200787(v=exchg.150).aspx
2. It depends on the usage of the specific accepted domain. And Exchange version has no influence.
To determine it, you can firstly check the function of the three types in the following article:
http://technet.microsoft.com/en-us/library/bb124423(v=exchg.150).aspx
3. Here are some reference about the migration from on-premise Exchange server to Office 365:
http://www.msexchange.org/articles-tutorials/office-365/exchange-online/configuring-exchange-2013-hybrid-deployment-migrating-office-365-exchange-online-part1.html
Additionally, since the issue is related to Exchange online, I recommend you ask for help on our Exchange online forum to get more professional help:
http://social.technet.microsoft.com/Forums/msonline/en-US/home?forum=onlineservicesexchange
If you have any question, please feel free to let me know.
thanks,
Angela Shi
TechNet Community Support

Recently Added Office 365 Domain to Azure

We just signed up with Azure and I'm in the process of building it out. We also have an existing Office 365 subscription which we use primarily for email (Exchange 2013 in Office 365). The trouble is that I'm fairly new to Office 365 and a complete noob
when it comes to Azure, so everything I'm doing to get these two worlds to talk is self taught (we do not have support).
In an effort to get a head start, in Azure, I have built two servers to be designated as domain controllers and two servers to be designated as application servers; a total of four virtual servers now exist in Azure. I installed the respective roles
on each of the servers.
This morning I finally managed to understand how to link our existing Office 365 domain to Azure; the Office 365 directory now exists in Azure. Subsequently, I attempted to promote the two virtual servers to domain controllers in the recently added
directory to no avail. When I begin the promotion, I select the option to
Add a domain controller to an existing domain, enter the domain name (Office 365) and the domain admin creds, and then I'm met with the following error:
An Active Directory domain controller for the domain "name of domain" could not be contacted
Basically, when I attempt to add this to server to that domain I'm met with an error that no domain controller exists or if I attempt to promote the server to a domain controller I'm met with the error above. How do I get around it? How can I
successfully add either of the newly provisioned virtual servers to the domain?
Any help you can offer would be great!

Marcin is correct.
For better understanding, imagine Windows Azure Active Directory as an Organizational Unit (OU), in which you can manage user accounts and groups, but no any computer accounts. WA AD is for handling authentications, and because Office 365 (which is a SaaS)
authenticates with WA AD, and an Azure subscription is also using WA AD object for authentications, you can import WA AD of an Office 365 subscription into Azure.
On the other hand if you build your own network and infrastructure in Azure, and needs a Domain Controller, you need to install a VM with Active Directory Domain Services role.
Regards,
Tibor Veszprémi
Systemfarmer

Audit log web service for Office 365

I am working on developing an application that will interact with the Office 365 services. I am currently able to get the files and folders of a singed-in user using the OAuth2 authentication. I am aware that we can get the audit logs and it will be exported
to Microsoft Excel.
However, my question is : Is there any web service or endpoint I can use to access the logs using REST API. For example, Box provides an api/endpoint to achieve this: http://developers.box.com/docs/#events.
Any help would be highly appreciated!
Many Thanks

Currently displaying audit log reports in REST or API is not supported by Microsoft. SharePoint online in Office 365 just supports saving an audit log report as a Microsoft Excel 2012 Preview workbook.
You can refer the following post :
http://community.office365.com/en-us/f/172/t/164047.aspx

Problem to add office 365 domain because of RMS

Hi team,
I've purchased an office 365 small business plan. I wasn't able to add my personal domain & the office 365 support told me that's because I've my own domain registred in the RMS sharing application.
Could you please delete my domain "dhersin.net" from your registred RMS domains ?
You can refer to this thread but it's in french ... : http://community.office365.com/fr-fr/f/245/p/284703/869773.aspx#869773
Many thanks,
Kind regards.

Hi,
Could anyone advise on this matter ?
Thanks,
Kind regards.

Office 365 Business Premium vs Office 365 ProPlus

Hi,I have a user starting next week and I am thinking about what office 365 plan I should get for him. The main purpose of using this plan is to get him only Office applications as we have On-premise Exchange server so email service is requried.In Australia, Office 365 ProPlus is more expensive then Business Premium which I think it is nonsense because Business Premium also offers thelatest version of office application and I think ProPlus should be cheaper or at least equally same. The only differences between these two plans are Office 365 ProPlus plan comes with Access 2013 which Premium plan does not offer and Exchange online.Office 365 Business Premium: $17.50 user/monthhttps://products.office.com/en-au/business/compare-office-365-for-business-plansOffice 365 ProPlus: $19.40 user/month...
This topic first appeared in the Spiceworks Community

On Spiceworks there's an article titled 10 signs SysAdmins are really superheroes - Yes, we mean you!http://community.spiceworks.com/topic/1099346-10-signs-sysadmins-are-really-superheroes-yes-we-mean-...and has a picture of an IT guy with the Superman S under his shirt. So I responded with Based on Man of Steel , I believe you have an anarachrinistic impression of Clark Kent.As we all know now... Pa Kent's paranoia regarding the alien-nature of Clark's being means that maintaining the secret of Clark's origins is the primary mission no matter what is happening in the environment. Thus Pa Kent's noble death saving a stupid dog from the path of a tornado.. making it clear to Clark to do nothing. Who wouldn't want a husband and father like that?

Exchange 2010 to Office 365 federation trust

I'm trying to setup a federated trust between two companies on different domains (Exchange 2010 SP2 on premise/Office 365). We are trying to share calendar information and contacts. I've gone through the steps to setup a federated trust and created
the TXT file for the (Exchange 2010) on premise domain. When I try creating the trust from the Exchange 2010 on premise domain to Office 365 I receive an error.
COMMAND:
Set-FederatedOrganizationIdentifier –AccountNamespace <some_domain> –DelegationFederationTrust “Microsoft Federation Gateway”
ERROR:
Proof of domain ownership has failed. Make sure that the TXT record for the specified domain is available in DNS. The format of the TXT record should be "example.com IN TXT hash-value" where "example.com" is the domain you want to configure
for Federation and "hash-value" is the proof value generated with "Get-FederatedDomainProof -DomainName example.com".
Do I need to create a TXT file for the Office 365 side?
Thanks
Stephen

You need to add this TXT record for your domain and publish it EXTERNALLY, so that the MFG can verify it. For example, check the TXT records for Microsoft.com:
PS C:\> Resolve-DnsName -Type TXT microsoft.com
Name Type TTL Section Strings
microsoft.com TXT 2346 Answer {FbUF6DbkE+Aw1/wi9xgDi8KVrIIZus5v8L6tbIQZ
kGrQ/rVQKJi8CjQbBtWtE64ey4NJJwj5J65PIggVY
NabdQ==}

Office 365 Exchange

Guys,
I am testing Office 364 Exchange. According to the manual, I need to change the dns servers from my hostingprovidor into ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com . But when I do that, my website isn't available anymore.
So, I would like to use office 365 and exchange but I would like to keep my website @ my hostingprovidor.How an I get that done?
regards,

Hi,
You do not need to change the NS record to be able to test Office 365.
The only reason for doing so, is to let Office 365 manage you DNS entirely.
http://office.microsoft.com/en-us/office365-suite-help/verify-your-domain-and-change-name-servers-at-any-dns-hosting-provider-or-domain-registrar-HA103480040.aspx
What you probably want is to just change MX, and a few CNAMEs and some SRV records. You get the values for the records if you add your domain in the Office 365 admin center.
Take a look at these two support documents.
http://office.microsoft.com/en-us/office365-suite-help/add-your-domain-to-office-365-HA102818660.aspx
http://office.microsoft.com/en-us/office365-suite-help/create-dns-records-at-any-dns-hosting-provider-for-office-365-HA103479204.aspx
Hope this helps :)
/Anders Eide

Challenging Task - Two Domains - Two Office 365 Service

Similar Messages

Maybe you are looking for