Monitoring many mailboxes in Exchange OnLine

Hi
I'm developing a large-scaled Exchange calendar synchronization application using EWS Managed API 2.1.
When Microsoft upgraded the Exchange OnLine platform to Exchange 2013 I had to re-write some of the code in order to adapt to the new behavior of the CAS (e.g. subscription groups and GroupingInformation).
Typically our customers have 4000-5000 mailboxes that we have to monitor but some of them have 20.0000 or more. As the trend is that also large companies are moving their Exchange to the cloud I often get questions from sales about how many calendars
we can monitor for changes.
So, now to my question;
Is there any absolute limit for how many mailboxes that can be monitored in Exchange OnLine?
I'm using EWS Managed API 2.1, utilizing Autodiscover, Impersonation, Streaming Notifications and subscription groups (200 subscriptions each). I'm aware of that throttling limits will be reached from time to time and that I have to handle them as they occur.
Best Regards
Jens
Jens Eriksson TalkIT Communication AB

Hi CCStefanonni,
If you delete a user account or remove a license from a user, mailbox will be permanently deleted after 30days. Since you are in Midsize Business plan you don't have in-place hold to keep inactive user data for more than 60 days. As I see, you have two options,
Convert the user mailbox to a Shared Mailbox. Keep in mind shared mailboxes are only 5GB in size.
Download the PST and keep it somewhere safe (ex: one drive). You can upload the PST through the shell or though Outlook later if needed.
Thanks

Similar Messages

Cutover onprem mailbox to exchange online without Hybrid configuration wizard.

HI!
We have on premise exchange server 2010 sp2 deployed with domain1.com. We have registered our tenant and verified the ownership of domain1.com on our office365 tenant. We have successfully deployed EOP and configured inbound and outbound connectors
and all the mailflow is working fine. We havenot deployed directory sync server and ADFS for the deployment of EOP. Our Mx is pointed to domain1-com.mail.protection.outlook.com and all the mails are sent and received through EOP. I
want to move a user mailbox such as [email protected] to Exchange Online from on-premise exchange without configuring Dirsync and Exchange Hybrid configuration wizard. I already know the some of the limitations.
If I create a user account [email protected] on the tenant and activate the Exchange License on office365 to create the Mailbox on Exchange online.
I want to know that if I have to create any other send and receive connector or any other configuration either on office365 or exchange online if I cutover one user from our on-premise to exchange online without configuring Exchange Hybrid configuration
wizard on our on premise exchange server??
Will this effect the mailflow between onpremise and exchange online users?
Regards,
Abdullah Salam

It's not clear to me what type of migration you're trying to do. A cutover migration would be an option as long as you understand the limitations of that process. Otherwise are you looking to use a third-party migration tool or some other
mechanism?
The reason you would end up with two mailboxes is if when you assign an Exchange license to a user in the cloud without DirSync, a mailbox is provisioned for that user. You can assign a license after the mailbox is moved assuming you have a mail-enabled
user in the cloud and can do a remote move to it.
Once you manage to get the mailbox to the cloud, now you have to deal with routing which means you'll need a mail-enabled user on-premises for every mailbox in the cloud and will need to have a target address with a coexistence domain such as "@tenant.mail.onmicrosoft.com".
Likewise, Exchange Online will need a mail-enabled user for every on-premises mailbox in order to have a populated GAL and route in that direction.
For security reasons we don't to setup Dirsync and hybrid.
I hear this occasionally and remind organizations that you're putting the actual data (the stuff the credentials protect) in Microsoft's datacenters. If it's a question of trust, cloud services might not be the most appropriate solution for the
organization. The Office 365 Trust Center (http://trust.office365.com/) can provide some insight into the controls that Microsoft has in place to protect your data.
DirSync or the new AADSync can be scoped such that they only sync limited objects. From there, you have the options of Password (Hash) Sync with DirSync (not yet with AADSync) or using AD FS which leaves the authentication with your on-premises
directory.
Joseph Palarchio http://www.itworkedinthelab.com

Migrating 122GB mailbox to Exchange Online

Hi all,
I'm attempting to migrate a 122GB journal from a decommissioned on premise exchange (SBS2008 - Exchange 2007)
Using a 32 bit Windows 7 machine with Outlook 2007
So far, I've attempted to use Export-Mailbox -Identity journal -PSTFolderPath
E:\drive\journal.pst
After a week of it sat exporting, it eventually failed with an error regarding too many corrupt messages
On my second attempt, I added the flag of -BadItemLimited 1000 and it sat for a week
Approving Object
I think next I will, create a new mailstore and move it across and try and export from that..
Failing that, specify export by date?
Does anybody have any suggestions/tips/instructions on how to move a mailbox of that size?
Thanks

Hi,
As far as I know, Resource Mailboxes (Room, Shared, Equipment) is moved between on-premise Exchange servers in the exact same way as User Mailboxes:
http://social.technet.microsoft.com/Forums/exchange/en-US/f60d736d-0d45-4c27-adc8-a7e04afdb6e3/resource-mailboxes-and-contacts-move-during-transition-to-exchange-2013?forum=exchangesvrdeploy
Based on my research, there is nothing special for resource mailboxes in the transition from on-premise to Exchange online:
http://technet.microsoft.com/en-us/library/jj898486(v=exchg.150).aspx
And you’re welcomed to confirm it on our Exchange online forum:
http://social.technet.microsoft.com/Forums/msonline/en-US/home?forum=onlineservicesexchange
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Site mailboxes with Exchange Online?

Hi All,
We would like to use Site Mailboxes with our On-Prem 2013 Ent deployment. In addition to our On-prem deployement, we also have the full O365 suite including Exchange, SharePoint, Lync, etc.
Question: Can we use Site Mailboxes in our On-prem environment, connected to Exchange online?
The tables at the bottom of the following article indicates that SharePoint Online must be included in the O365 subscription, but the notes are not clear as to whether it is a requirement to use the SharePoint Online instance of SharePoint or if we could
use our On-Prem instance.
http://technet.microsoft.com/en-us/library/exchange-online-sharing-and-collaboration.aspx

Hi,
According to your post, my understanding is that you wanted to use SharePoint 2013 on-prem and Exchange online for Site mailbox feature.
I’d like to briefly introduce the Site mailbox creation in SharePoint online at first. The Site mailbox is enabled by the site collection admin and the whole creation process is finished from the background. For the users who want to access the Site mailbox,
it requires the SharePoint online users to also have the Exchange online licenses.
In SharePoint on-premise, the Site Mailbox requires Exchange Server 2013 is mentioned in this SharePoint Server 2013 instruction:
Configure site mailboxes in SharePoint Server 2013.
Since Exchange on-premise includes more features and capabilities than Exchange online, I’ think it’s not feasible to integrate the SharePoint on-premise to the Exchange online service for setting up the Site Mailbox feature.
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Decommission Exchange 2010 after all mailboxes have been moved to Exchange Online

Currently very confused on what to do.
I'm looking to migrate mailboxes to Exchange online using a Hybrid deployment with Dirsync. The users have multiple email and domain addresses. They are moving away from their SBS 2011 and Exch 2010 server. They have an AD and File and Print server. Once
all mailboxes are moved and mx records are changed and everything is running smootkly. I would like to then decommission SBS and Exch 2010 box and still use DIRsync
Few questions
Once I remove Exch 2010 what wont I be able to do. Cant find anything specific online
Will I still be able to create a user in AD then login to Exchange online and assign a license then
the user would have mailbox
Edit a user and add smtp email address.
As I don’t have many users should I rather use PST migration or will I run into the same problems.

Yes, you should move the arbitration mailboxes - they are organizational mailboxes, not mailbox database mailboxes.
Make sure all Exchange resources and operations hosted on this server have been moved to your Exchange 2013 system before you remove Exchange from this server. If you try to remove Exchange (in either the GUI or the command line) and something is
still using this server, you will be alerted that something is still using the server and will be told what it is.
HTH ...

What is the behavior of items in an Exchange Online Inactive mailbox that were under a Litigation Hold for a set period of time.

I am specifically asking what happens to the items in an Inactive Mailbox that was placed on Litigation Hold prior to Deletion when the Litigation Hold has say a '6 mo.' Retention Period assigned.
Do any of those items 'expire' out of the mailbox? Do only the items in the 'Admin' folders of the Deleted Items get removed, or none?
I am not asking about recoverability of that mailbox, more of what the behavior is specifically when the Litigation Hold is set to expire after a certain amount of time.

There is no expiration, check the blog post here:
http://blogs.technet.com/b/exchange/archive/2013/03/21/preserve-mailbox-data-for-ediscovery-using-inactive-mailboxes-in-exchange-online.aspx
All content in an inactive mailbox is on hold until you remove the hold from the mailbox.

Exchange Online mailbox Deletion check

Hi,
I am facing a peculiar problem. When we delete a mailbox in Exchange Online and we find the mailbox is not visible in Exchange Admin center. This is fine. However (sometimes), a few minutes later, when we check whether the mailbox has been deleted using
EWS api (GetSearchableMailboxes), the mailbox is still returned in the results. Therefore, even though mailbox is not visible in Exchange Admin center we cannot determine with certainty (programmatically) whether mailbox exists or not.
How do we ensure that the check for mailbox existence is consistent at all times. Is there any api or command available for this purpose. Does it take time for Exchange to reflect the deleted status of mailbox.
Please suggest.
Thanks & Regards,
Gagan
Gagan

It's not clear to me what type of migration you're trying to do. A cutover migration would be an option as long as you understand the limitations of that process. Otherwise are you looking to use a third-party migration tool or some other
mechanism?
The reason you would end up with two mailboxes is if when you assign an Exchange license to a user in the cloud without DirSync, a mailbox is provisioned for that user. You can assign a license after the mailbox is moved assuming you have a mail-enabled
user in the cloud and can do a remote move to it.
Once you manage to get the mailbox to the cloud, now you have to deal with routing which means you'll need a mail-enabled user on-premises for every mailbox in the cloud and will need to have a target address with a coexistence domain such as "@tenant.mail.onmicrosoft.com".
Likewise, Exchange Online will need a mail-enabled user for every on-premises mailbox in order to have a populated GAL and route in that direction.
For security reasons we don't to setup Dirsync and hybrid.
I hear this occasionally and remind organizations that you're putting the actual data (the stuff the credentials protect) in Microsoft's datacenters. If it's a question of trust, cloud services might not be the most appropriate solution for the
organization. The Office 365 Trust Center (http://trust.office365.com/) can provide some insight into the controls that Microsoft has in place to protect your data.
DirSync or the new AADSync can be scoped such that they only sync limited objects. From there, you have the options of Password (Hash) Sync with DirSync (not yet with AADSync) or using AD FS which leaves the authentication with your on-premises
directory.
Joseph Palarchio http://www.itworkedinthelab.com

Exchange Online mailbox configuration without Exchange Hybrid Configuration wizard.

HI!
We have on premise exchange server 2010 sp2 deployed with domain1.com. We have registered our tenant and verified the ownership of domain1.com on our office365 tenant. We have successfully deployed EOP and configured inbound and outbound connectors
and all the mailflow is working fine. We havenot deployed directory sync server and ADFS for the deployment of EOP. Our Mx is pointed to domain1-com.mail.protection.outlook.com and all the mails are sent and received through EOP. I
want to move a user mailbox such as [email protected] to Exchange Online from on-premise exchange without configuring Dirsync and Exchange Hybrid configuration wizard. I already know the some of the limitations.
If I create a user account [email protected] on the tenant and activate the Exchange License on office365 to create the Mailbox on Exchange online.
I want to know that if I have to create any other send and receive connector or any other configuration either on office365 or exchange online if I cutover one user from our on-premise to exchange online without configuring Exchange Hybrid configuration
wizard on our on premise exchange server??
Will this effect the mailflow between onpremise and exchange online users?
Regards,
Abdullah Salam

It's not clear to me what type of migration you're trying to do. A cutover migration would be an option as long as you understand the limitations of that process. Otherwise are you looking to use a third-party migration tool or some other
mechanism?
The reason you would end up with two mailboxes is if when you assign an Exchange license to a user in the cloud without DirSync, a mailbox is provisioned for that user. You can assign a license after the mailbox is moved assuming you have a mail-enabled
user in the cloud and can do a remote move to it.
Once you manage to get the mailbox to the cloud, now you have to deal with routing which means you'll need a mail-enabled user on-premises for every mailbox in the cloud and will need to have a target address with a coexistence domain such as "@tenant.mail.onmicrosoft.com".
Likewise, Exchange Online will need a mail-enabled user for every on-premises mailbox in order to have a populated GAL and route in that direction.
For security reasons we don't to setup Dirsync and hybrid.
I hear this occasionally and remind organizations that you're putting the actual data (the stuff the credentials protect) in Microsoft's datacenters. If it's a question of trust, cloud services might not be the most appropriate solution for the
organization. The Office 365 Trust Center (http://trust.office365.com/) can provide some insight into the controls that Microsoft has in place to protect your data.
DirSync or the new AADSync can be scoped such that they only sync limited objects. From there, you have the options of Password (Hash) Sync with DirSync (not yet with AADSync) or using AD FS which leaves the authentication with your on-premises
directory.
Joseph Palarchio http://www.itworkedinthelab.com

Configure send connector for exchange online protection

Hello Forum members,
I am trying to configure send and receive connectors for Exchange 2010 to route
on-premises mailboxes to Exchange OnLine Protection. The "help" info MS provides
is for Ex 2013 - and the EAC GUI and config does not lend a close fit to using the 2010
Exch Management Console. How can I configure connectors to properly connect to the Exchange Online Protection?
I have seen where the ip addresses are posted, etc. I am unclear how to configure the properties on the SBS 2011/EX 2010 server.
Any tips will help,
Thanks,
Eric H.
Network and Server Installs

Hello Wesleyhe,
You cannot use AD anything with EOP - if you mean exchange on-line protection.
you have to set a smart host on the SBS server to connect to EOP, you may need to add the EOP server ips to your network config
on the SBS server. the smart host line (for the send connector on SBS server) is something like: yourdomainname-com.mail.protection.outlook.com.
Then you need to configure the outside ip for your SBS server access in the EOP admin area.
Hope this helps.
eholz
Network and Server Installs

Certificates for Office 365 Hybrid Exchange 2010 Exchange Online v15

Certificates for Office 365 Hybrid Exchange 2010 Exchange Online v15
We need to set up a hybrid server to allow us to begin moving mailboxes to Exchange Online. We created a new Server 2012 R2 server with Exchange 2013 SP1 to act as our Hybrid server. Reading the literature leaves me with questions about what
certificates I need. My understanding is that the certificates in play on the on-premise Exchange 2010 servers don't need to be changed.
I've looked at the TechNet article "Certificate requirements for hybrid deployments"
http://technet.microsoft.com/en-us/library/hh563848(v=exchg.150).aspx
Certificate requirements for the new Exchange 2013 SP1 server are still unclear to me, I think the new server needs a SAN certificate with:
Hybridserver.domain.edu
autodiscover.domain.edu
EWS.domain.edu
Can anyone clarify?

Cert is required only if you want to deploy ADFS for SSO.
Otherwise you can use your existing Cert for all the Services
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

[office365 Exchange online][MVC5][EWS Managed Api] Need a hack to get access token ?

Hi there, I am using following code example to get access token from Azure AD online. I need to bridge EWS managed api with office 365 Api via Azure AD. The below code is working just fine in my MVC application but I am looking for a way to get the access
token in simple string returning function so that I can use it to make call against EWS mananged api.
private static string tempToken = "";
public static string GetAccessToken()
return tempToken;
internal static async Task<OutlookServicesClient> EnsureOutlookServicesClientCreatedAsync(string capabilityName)
var signInUserId = ClaimsPrincipal.Current.FindFirst(ClaimTypes.NameIdentifier).Value;
var userObjectId = ClaimsPrincipal.Current.FindFirst("http://schemas.microsoft.com/identity/claims/objectidentifier").Value;
AuthenticationContext authContext = new AuthenticationContext(Settings.Authority, new NaiveSessionCache(signInUserId));
try
DiscoveryClient discClient = new DiscoveryClient(Settings.DiscoveryServiceEndpointUri,
async () =>
var authResult = await authContext.AcquireTokenSilentAsync(Settings.DiscoveryServiceResourceId,
new ClientCredential(Settings.ClientId,
Settings.AppKey),
new UserIdentifier(userObjectId,
UserIdentifierType.UniqueId));
return authResult.AccessToken;
var dcr = await discClient.DiscoverCapabilityAsync(capabilityName);
return new OutlookServicesClient(dcr.ServiceEndpointUri,
async () =>
var authResult = await authContext.AcquireTokenSilentAsync(dcr.ServiceResourceId,
new ClientCredential(Settings.ClientId,
Settings.AppKey),
new UserIdentifier(userObjectId,
UserIdentifierType.UniqueId));
return authResult.AccessToken;
catch (AdalException exception)
//Handle token acquisition failure
if (exception.ErrorCode == AdalError.FailedToAcquireTokenSilently)
authContext.TokenCache.Clear();
return null;
This is an excerpt from Microsoft single tenant application in MVC5. In the code, I have created a function called GetAccessToken() which does nothing.. I am hoping you experts can help me figure out how to transfer the accessToken from EnsureOutlookServcesClientCreated
function which is actually returning token, to my GetAccessToken() so that I can make call against EWS managed Api. Sorry, If I sound pretty stupid but I really need your help in this regard.
best regards,

Yes sir, Let me try to explain me about my scenario. I need to use EWS managed Api with office 365 Rest Api to get benefits from both the Apis. Here is here code I am using to connect to EWS managed Api but it is failing with 401:Unauthorized. I already
have "Full Access" turned on in Azure AD. I have the access token from AZure AD and want to use it to make call against EWS managed Api.
var outlookClient = await AuthHelper.EnsureOutlookServicesClientCreatedAsync("Mail");
//IPagedCollection<IMessage> messagesResults = await outlookClient.Me.Messages.ExecuteAsync();
// Get the ID of the first message.
// string messageId = messagesResults.CurrentPage[0].Id;
string tokenx = AuthHelper.GetAccessToken();
ExchangeService service = new ExchangeService(ExchangeVersion.Exchange2013);
service.HttpHeaders.Add("Authorization", "Bearer " + tokenx);
service.PreAuthenticate = true;
service.SendClientLatencies = true;
service.EnableScpLookup = false;
service.Url = new Uri("https://outlook.office365.com/EWS/Exchange.asmx");
// Get all the folders in the message's root folder.
ExFolder rootfolder = ExFolder.Bind(service, WellKnownFolderName.MsgFolderRoot);S
Scenario of my migration application:
1. I have a Gmail mailbox email in Raw(complete email in base64-urlsafe with attachments) format with RFC2822. I need to migrate this mailbox to Exchange online. I believe EWS managed Api has better support on this one.
2. Likewise I need to migrate Gmail Calendars, Tasks and Contacts to Exchange online.
I would be highly grateful to you , if you tell me how to bridge EWS managed Api with office 365 Api.
best regards,

Decommissioning Exchange Server 2007 after staged migration to Exchange Online

Hi there,
I have recently migrated all our on-premise Exchange 2007 user mailboxes to Exchange Online/Office 365 using a staged migration running DIRSYNC (Windows Azure Directory Services Directory Synchronization Tool). Now I would like to remove the old on-premise
Exchange server but I am not sure if that would break things.
Also with Disync enabled you cannot manage some mailbox properties in Exchange Online, it needs to be done with AD, right? If that is the case is it a good idea to have Exchange 2010/2013 Management Tools installed to manage the mailboxes?
Thank you,
Pieter

Hello,
Windows Azure Directory Services Directory Synchronization Tool is used to synchronize on-premises directory objects(users, groups, contacts) to cloud. If you want to remove the old on-premise Exchange server, you need to make sure you have moved mailboxes
to o365 successfully, the mail flow is ok and the user can access their mailboxes.
Here is an article for your reference.
http://technet.microsoft.com/en-us/library/jj898486(v=exchg.150).aspx
Not all operations for mailbox can be done via AD, so I recommend you install Exchange Management Tools to manage the mailboxes.
If you have any feedback on our support, please click here
Cara Chen
TechNet Community Support

Migrating emails from Symantec Enterprise Vault to Exchange Online

Hi
I am in the process of planning a migration from on-premises Exchange 2010 to Exchange Online in Office 365. The on-premises Exchange environment is using Symantec Enterprise Vault v9 for archiving emails older than a certain number of months.
I am planning to use the cutover migration method to migrate mailboxes to Exchange Online. What is the best way to migrate email from Enterprise Vault to Exchange Online? Will the E-mail Migration Tool in Exchange Control Panel do the job or will a third
party tool need to be used?

You have a few options ...
a/ Export all the mail from each archive to a PST file, and then import that in to Exchange, or Office 365.
b/ Export all the mail from each archive back to the original mailbox.
c/ Use a third party tool, like Archive Shuttle from QUADROtech which can migrate directly to Office 365 from Enterprise Vault.
Hope that helps,
There are other migration solutions out there as well from TransVault and NUIX.

Exchange Online users logging into OWA On Premises.

Greetings!
We are implementing hybrid Exchange Online with Exchange 2013, and we face the following situation:
When an Exchange Online user tries to access through OWA on-premises, a page appears with a link to the Exchange Online OWA.
Is it supposed to be this way?
Why the redirection is not automatic?
Seems so obvious that the redirect should be automatic that if it is to be this way (the user having to click the link), there must be some technical justification. Can anyone refer me some article about it? For to convince the top brass of the company here
that it has to be like that!
Thanks in advance !!!
Fabio Martins MCDST/MCSA Brasil!!!

Hi
As per the information and details provided by you, to solve the problem of Exchange online users logging into OWA on Premises, please follow these steps: -
The user will be able to use the
OWA URL points to the on-premises Exchange 2013 server. On the redirection page, you can choose to
save the new URL to his browser favorites and click on the URL.
When clicking on the URL, the user will be taken through the authentication process. For OWA, that means that you can try to access his mailbox in Exchange Online &
Exchange online will redirect the user to “login.microsogtonline.com”, where
you can enter UPN.
Once the UPN is entered and you switches to the password field, Office 365 will detect that the UPN domain is federation with an Office 365 tenant. This result in a redirect
to the on-premises federation endpoint (in this case sts.clouduser.dk) and depending on whether the user is domain joined and domain-connected or uses an external client, you will get
single sign-on (SSO) or be required to enter your UPN and password.
Because of the organizational relationship that was set up between Exchange Online and Exchange on-premises during the Exchange hybrid configuration lookups when booking
meetings, mail tips, etc. also work as expected from Exchange Online to Exchange on-premises and vice versa.
I hope this information will be helpful for you.
Thanks and regards
Shweta@G

Questions on managing Office 365/Exchange Online Mailboxes in Server 2012 Essentials

Wondered if anyone could answer a couple of queries:
When managing Office 365/Exchange Online mailboxes in Windows Server 2012 Essentials:-
1. Does the server itself act as the Exchange server i.e. does it do all of the downloading/sending of emails or does Outlook on each workstation still communicate direct with the Office 365/Exchange Online server address?
2. Does Outlook on each workstation have the Exchange server address set to the internal address of the Server 2012 Essentials box or does it still have the external Office 365/Exchange Online server address?
I don&#39;t work for Microsoft - I just use their products.

Hi,
When you integrate Office 365/Exchange Online mailboxes in Windows Server 2012 Essentials,you can see the mailbox usage information on the Essentials Dashboard and manager users. However, the essentials server won't download/send emails and Outlook
will still communicate with the O365/Exchange Online Server. In addition, the Exchange server address would be point to the external server address.
You can also refer to the article below to get more related information:
Email Options Supported by Windows Server 2012 Essentials
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Monitoring many mailboxes in Exchange OnLine

Similar Messages

Maybe you are looking for