• Multi-forest and Multi-tenant scenarios with Office 365

    I have had several questions around multi-forest and multi-tenant questions from my education customers.  Here is a FAQ I put together:

     

    Can you have multiple forests with a single tenant?

    Yes, with FIM Connector for Office 365 or with the upcoming AADirsync tool. You can grab the beta of AADirsync tool here.  Read more on AADirsync here.

     

    Can you have one forest with multiple tenants?

    Yes, this is now supported as of recently.  You either have to use the FIM Connector for Office 365 or you can now use multiple Dirsync servers syncing to each unique tenant. The key is you cannot sync the same objects into the different tenants. You must create dirsync filtering on each dirsync server.

     

    Can I have a non-AD directory sync to a tenant?

    Yes, with FIM Connector for Office 365.

     

    Can I have one ADFS farm servicing multiple forests?

    Yes, as long as trusts exist between the forests this will work. Each forest much have unique UPN login suffixes for this to work.

     

    What if do not have trusts between the forests?

    If no trusts exist between the forests than multiple ADFS farms are required.

     

    Can I have multiple Exchange orgs connecting via Hybrid into a single tenant?

    Yes, this is a new capability available in Exchange 2013 SP1. See here. 

     

    What if I have a resource forest for Exchange and an account forest for logins?

    Setup dirsync against the resource forest and setup ADFS against the account forest. Eventually, collapse the resource forest data into the account forest and then change dirsync to work against the account forest.

  • Exchange Online mailbox quotas are now 50GB in size!

    Great news we just announced today the new Exchange Online mailbox quotas are now 50GB in size with no price increase. You get double mailbox storage for FREE and it will also be applied to any existing mailboxes you have in production with no extra steps required!

    It is starting to rollout to tenants today and will continue through November. So you now get massive mailboxes in Office 365 education which should provide plenty of mail storage for faculty, staff and students for quite a long time.

     

    Here is a matrix with all the new storage quota details:

    image

    Please read the official blog post here for more details.

  • Office 365 Education Exchange Online mailbox quotas are doubling to 50GB FREE

    It’s turning out to be a bumper week for Office 365 Education updates. Earlier this week it was announced that SkyDrive Pro was increasing the default storage quota from 7 GB to 25 GB and starting from now Office 365 Education Exchange Online mailbox quotas are doubling to 50 GB FREE!

    When will I see my mailboxes get bigger?

    Stephen Brown, a product manager on the Exchange team, made the announcement yesterday on the Office 365 technology blog that the increased quota would be rolling out from yesterday through to November so keep an eye out for the bigger quota over the next few weeks and months. This is a tremendous improvement, and one that I hope will benefit students, teachers, admin folks, and researchers across education.

    If you’re an IT admin there are some tips to remember to make managing large mailboxes even easier:

    Screenshot of the "Change Account" screen in Microsoft Office Outlook 2013

  • Useful new troubleshooting and analysis tools for Office 365

    We have recently released several new tools to help you with analysis and troubleshooting with Office 365:

     

    Pre-checking tools:

    Use the new Onramp readiness check tool – replaces the older Office 365 readiness check tool – helps determine your Active Directory readiness for Office 365 and other areas:

     

    image

     

    Visit Onramp checking tool here.

     

     

    New Network analysis tool helps you determine latency, bandwidth, etc:

     

     

    image

    Check your network and bandwidth for Office 365 here.

     

     

     

    Deployment troubleshooting tools:

    Is there a self-help diagnostic DIY Office 365 troubleshooter tool?

    Yes, there is a pretty good self-diagnostic troubleshooter you can use:

    image

    See here for this tool.

     

    How can I validate my firewall, DNS, Hybrid server or ADFS are configured correctly for Office 365 ?

    Use this Remote Connectivity Analyzer tool here:

    image

    Visit the site here.

     

     

     

    I can’t connect Outlook to Exchange Online?

     

    Three tools that can help you here:

    1) Remote Connectivity Analyzer (linked above)

     

     

    2) Outlook to Office 365 connectivity tshooter

     

    image

    See here for this tool.

     

    3) Use the Microsoft Connectivity Analyzer Tool (MCAT):

    Install Now

    See here for the MCAT tool.

     

     

    I can’t connect the Lync client to Lync Online? 

    Try these Lync tshooter applications:

    1) Lync Online client Troubleshooter tool here.

     

    2) Use MOSDAL Lync Connectivity Analyzer tool

     

    image

    Grab tool here.

     

     

     

    I am having free/busy calendar sharing issues with Exchange Hybrid.

    Use the Exchange Hybrid free/busy tshooter

     

    image

    Visit the Hybrid troubleshooting tool here.

     

    I am having problems with lost mail, slow mail, or mail bounces with Office 365

    Use the Exchange Online Mailflow troubleshooter:

    image

     

    Visit the Exchange Online mailflow tool here.

  • Windows Azure Active Directory Connector (Release Candidate)

    The DirSync team and the FIM Sync team are pleased to announce that we have released the Release Candidate of the Windows Azure Active Directory (AAD) Connector on Connect for pre-release evaluation. This replaces the Office 365 Connector which has earlier been available only through MCS and partner engagements.

    This new Connector is based on ECMA2 and is the same we use in recent releases of DirSync. It is intended to be used when DirSync is not a viable option. We still recommend to use DirSync as the primary solution to synchronize AD to AAD and use it whenever possible. For additional details, please read the documentation that comes with the Connector.

    To be able to get access to the download on Connect, go to http://connect.microsoft.com/directory and join the program “Forefront Identity Manager 2010” – “FIM Synchronization Service Connectors Pre-release”. You will be automatically approved....

    You can then find the download here: https://connect.microsoft.com/site433/Downloads/DownloadDetails.aspx?DownloadID=50509.
    Feedback on the Connector and documentation can be submitted on Connect.

    We are also looking for customers who would be interested to use this Connector in a production environment in a TAP program. These customers will be able to get production support on this pre-release version of the Connector. If you have any candidates, please send an email to andreas.kjellman@microsoft.com.

    On behalf of the DirSync team and the FIM Sync team,

    Thanks!