Shulou(Shulou.com)06/02 Report--

Mailbox delegation permissions between local Exchange mailboxes and Office 365Exchange Online mailboxes are currently supported in Exchange hybrid deployment environments.

Scenario description: for example, a local mailbox needs to be given full control of an Exchange Online mailbox, while an Exchange Online mailbox needs to be given full control of a local Exchange mailbox.

However, currently supported permission delegation only supports Full Access [full control] and Send on Behalf [send on behalf (show representative)], but does not support Send AS [send as (do not show representative)].

To support local mailbox and cloud mailbox delegation permissions in a mixed environment, the first requirement is that the version of the AAD synchronization server must be version 1.1.553.0, and the Exchange Hybrid deployment feature needs to be enabled on the AAD server.

The latest AAD synchronization software download address: https://www.microsoft.com/en-us/download/details.aspx?id=47594

Secondly, different versions of Exchange have different support for mailbox permission delegation in a mixed deployment environment. The support for different versions is as follows:

Whether Exchange version support requires additional configuration Exchange 2016 all CU versions support without additional configuration Exchange 2013 CU10 below support, need to be manually configured, mailboxes need to be set before migration to the cloud need to manually configure Exchange 2013 CU10 support, as long as the organization level support ACLs automatic configuration Exchange 2010 SP3 Rollup26/25 support, organization level enable support ACLs individual configuration for each mailbox Exchange 2007 and previous versions do not support

The following describes how Exchange 2013 enables support for mailbox permission delegation in a mixed environment. The specific steps are as follows:

1. Enable ACLable object synchronization [Exchange 2013 CU10 and above only need to perform this step. It is recommended to perform this step before moving local mailboxes to the cloud, so as to avoid performing separate ACL synchronization for mailboxes migrated to the cloud. After performing this step in previous versions of CU10, you need to perform the second step]

1) install the latest version of AAD synchronization software and enable hybrid deployment on the AAD server.

2) run the following command on the Exchange server to enable ACL synchronization.

Set-OrganizationConfig-ACLableSyncedObjectEnabled $True

2. Execute the following command on the local Exchange to enable ACL synchronization for each remote mailbox.

ACL synchronization enabled by a single user

Get-AdUser | Set-AdObject-Replace @ {msExchRecipientDisplayType=-1073741818}

Enable ACL synchronization for all mailboxes

Get-RemoteMailbox-ResultSize unlimited | ForEach {Get-AdUser-Identity $_ .Guid | Set-ADObject-Replace @ {msExchRecipientDisplayType=-1073741818}}

Result verification

Get-RemoteMailbox-ResultSize unlimited | ForEach {Get-AdUser-Identity $_ .Guid-Properties msExchRecipientDisplayType | Format-Table DistinguishedName,msExchRecipientDisplayType-Auto}

Exchange 2010 SP3 Rollup 26 must enable ACL synchronization separately for each local remote mailbox, as shown in step 2 above.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.