ECS19 - Michael Van Horenbeeck - Divide Et Imperat Office 365 Mergers, Acquisitions and Divestitures
•Als PPTX, PDF herunterladen•
1 gefällt mir•454 views
ECS19 - Michael Van Horenbeeck - Divide Et Imperat Office 365 Mergers, Acquisitions and Divestitures
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Ähnlich wie ECS19 - Michael Van Horenbeeck - Divide Et Imperat Office 365 Mergers, Acquisitions and Divestitures
Ähnlich wie ECS19 - Michael Van Horenbeeck - Divide Et Imperat Office 365 Mergers, Acquisitions and Divestitures (20)
Mehr von European Collaboration Summit
Mehr von European Collaboration Summit (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
ECS19 - Michael Van Horenbeeck - Divide Et Imperat Office 365 Mergers, Acquisitions and Divestitures
- 2. ♡ ♡
- 3. “Experience is simply the name we give our mistakes…” (Oscar Wilde)
- 8. • • • •
- 9. • •
- 11. Domain Controller Company A AAD Connect A Domain Controller Company B B C B Add domain to AADCA B Sync/Move IDs to Forest A C Create Cloud IDs D D D Create Cloud IDs, match From Forest A
- 12. Domain Controller Company A AAD Connect A Domain Controller Company B Password Hash Sync (PTA/SSO) A A B B If pw is included in sync Password Hash Sync (PTA/SSO) from Forest A B
- 13. Domain Controller Company A AAD Connect 1 Domain Controller Company B ADFS 2 3
- 14. Domain Controller Company A AAD Connect Domain Controller Company B 1 ADFS 4 3 2
- 15. • • * Technically speaking, you could do an ADFS-to-ADFS ‘trust’ and have a user in Forest B authenticate through ADFS in Forest A. The setup requires a LOT of customization (claim rules) and is not for the faint hearted... Domain Controller Company A Domain Controller Company B CompanyA.com CompanyB.com ADFS CompanyB.com
- 16. accountenabled altrecipient assistant authorig c (Country Abbreviation) cn (CommonName) co (Country) company Connector.ID countrycode department description displayname dlMembSubmitPerms dlMemRejectPerms domain.FQDN Domain.netbios Objects contributed by either Resource Forest (RF) or Account forest (AF): 1. If RF has value; use RF value 2. If no value; use AF value Always use Resource Forest (RF) value. Always use Account Forest (RF) value. Account Forest Resource ForestAzure Active Directory (AAD Connect)
- 17. • • • • •
- 18. Domain Controller Company A AAD Connect Domain Controller Company B B AExchange Server(s) Direct Migration (hybrid or 3rd party) A B B ‘Simple MRS’ C C Cross-forest + Hybrid C B
- 19. • Company ACompany B CompanyB.com CompanyA.com
- 24. Company A Company B Recipient: user1@CompanyA.com Hybrid Hybrid Address Rewriting Solution User1 user1@CompanyB.com
- 25. • • • • •
- 26. • • • • • • •
- 27. • • • • • •
- 28. • • • • • •
- 30. • • • • • •
- 31. • • • •
- 32. Domain Controller Company A AAD Connect ‘Move’ directlyA A
- 33. Domain Controller Company A AAD Connect ‘Move’ directlyA B ‘Move’ to ForestA, then sync to cloud B Custom domains cannot exist in both tenants. UPN must change!in the process.
- 34. • • • •
- 35. Domain Controller Company A AAD Connect ‘Move’ directlyA C ‘Move’ to ForestA, then sync to cloud B C ‘Move’ directly, then match objects cross-prem
- 36. • • •
- 38. • • • •
- 39. • • • • •
- 40. • • • •
- 41. • •
- 44. • • •
- 45. • • •
- 46. •
- 47. • • •
- 48. • • • • •
- 49. • • • •
- 50. • • • • •
- 52. • • • • • • •
- 53. • • • • •