http://www.MyCentralAdmin.com

@ferringer

•

•

•

Your Environment

AD

MS Online

Directory Sync

Identity Services

Provisioning

platform Lync

Online

SharePoint

Online

Exchange

Online

Active Directory

Federation

Services 2.0

Trust

IdP Directory

Store

Admin Portal/

PowerShell

Authentication

platform

Office 365 Desktop Setup

Microsoft Online Services

IdP

Appropriate for

• Smaller orgs without

AD on-premise

Pros

• No servers required on-

premise

Cons

• No SSO

• No 2FA

• 2 sets of credentials to

manage with differing

password policies

• IDs mastered in the

cloud

Appropriate for

• Medium/Large orgs with

AD on-premise

Pros

• Users and groups

mastered on-premise

• Enables co-existence

scenarios

Cons

• No SSO

• No 2FA

• 2 sets of credentials to

manage with differing

password policies

• Single server

deployment

Appropriate for

• Larger enterprise orgs

with AD on-premise

Pros

• SSO with corporate cred

• IDs mastered on-

premise

• Password policy

controlled on-premise

• 2FA solutions possible

• Enables co-existence

scenarios

Cons

• High availability server

deployments required

`

Client

(joined to CorpNet)

Authentication platformAD FS 2.0 Server

Exchange Online or

SharePoint Online

Active Directory

Your Environment Microsoft Online Services

Logon (SAML 1.1) Token

UPN:user@contoso.com

Source User ID: ABC123

Auth Token

UPN:user@contoso.com

Unique ID: 254729

IM

AP

mig

rati

on

Cu

tover

mig

rati

on

Sta

ged

mig

rati

on

20

10

Hyb

rid

20

13

Hyb

rid

Exchange 5.5

Exchange 2000

Exchange 2003

Exchange 2007

Exchange 2010

Exchange 2013

Notes/Domino

GroupWise

Other

Sim

ple

Mig

rati

on

s H

yb

rid

IMAP Migration Supports wide range of email platforms

Email only (no calendar, contacts, or tasks)

Cutover Exchange Migration (CEM)

Good for fast, cutover migrations

No migration tool or computer required on-premises

Staged Exchange Migration (SEM)

No migration tool or computer required on-premises

Requires Directory Synchronization with on-premises AD

Hybrid Deployment

Manage users on-premises and online

Enables cross-premises calendaring, smooth migration, and easy off-boarding

• Delegated authentication for on-premises/cloud web services

• Enables Free/Busy, calendar sharing, message tracking, online

archive, and more Federation Trust

• Manage all of your Exchange functions, whether cloud or on-

premises from the same place - Exchange Administration

Center (EAC)

Integrated Admin

Experience

• Online mailbox moves

• Preserve the Outlook profile and offline file (OST)

• Leverages the Mailbox Replication Service (MRS)

Native Mailbox

Move

• Authenticated and encrypted mail flow

• Preserves the internal Exchange messages headers

• Support for compliance mail flow scenarios (central transport) Secure Mail Flow

Hybrid Coexistence Feature ComparisonFeature Simple Hybrid

Mail routing between on-premises and cloud (recipients on either side)

Mail routing with shared namespace (if desired) on both sides

Unified GAL

Free/Busy and calendar sharing cross-premises

Out of Office understands that cross-premises is “internal” to the organization

Mailtips, messaging tracking, and mailbox search work cross-premises

OWA redirection cross-premise (single OWA URL for both on-premises and cloud)

Single tool to manage cross-premises Exchange functions (including migrations)

Mailbox moves support both onboarding and offboarding

No outlook reconfiguration or OST resync required after mailbox migration

Preserve auth header (ensure internal email is not spam, resolve against GAL, etc.)

Centralized mail flow , ensures that all email routes inbound/outbound via on-prem

Analytics,

PerformancePoint BI Excel Services, Power View, PowerPivot

SharePoint Online SharePoint 2013

Deep refinement,

enhance relevancy Search People/Expertise, hover card, enterprise search

Full-trust code, BCS+ Developer Cloud app model, Sandbox, CSOM, BCS

Cross-site scripting,

content by search Internet Public Website, Design Manager, apps/store

Central Administration Admin Tenant-level, PowerShell, IRM, Recycle Bin

ECM /

Social

eDiscovery, Records Center, Site Mailbox, Mobile, Newsfeed, Follow, #, @

dot dot dot

- Early!

- ADFS

http://www.MyCentralAdmin.com

@ferringer