Speaker: Martina Grom;
Cloud Computing is a trend. Companys can work more efficient and fast, they can reduce costs and Speed up things. In this session we will Focus on various hybrid Scenarios, which possibilities you have on your way to the cloud and how you can manage your hybrid world. What common questions should be answerded for hybrid Solutions?
1. Office 365 in a hybrid world
MARTINA GROM, OFFICE 365 MVP, ATWORK
@MAGROM
WWW.ATWORK.AT
SHAREPOINT AND PROJECT CONFERENCE ADRIATICS
ZAGREB, 11/28/2012
2. About me
Martina Grom
CEO atwork
Bloggerin
Consulting
mg@atwork.at
blogs.technet.com/austria
Microsoft Office365 Blog
cloudusergroup.at
@magrom
6. What is Hybrid?
• Split Workload between On-Premises and the cloud
• Some users of Exchange, SharePoint or Lync are in the cloud where
others stay on-prem.
7. Reasons for Hybrid Solutions
• High Flexibility
• Fast Move to the cloud is not possible (business or technical
reasons)
• Workloads
• Compliance and security reasons
8. 2 possible Sceanrios
• Migration to the Cloud: Hybrid helps in transitioning
• Permanent Hybrid Model: Hybrid-solution stays in the enterprise
(for al longer time, maybe „forever“)
9. Hybrid to help migrations
Flexibility in
• Migration in your desired speed – low impact on
users and on your current infrastructure
• Pilotierung of Online Services with some Test Users
Deployment of the
whole company
Transfer of
Workloads, users or
sites in the cloud for a
pilot or a staged
Migration
On-Premises
Deployment of Usern
or Sites
10. Dauerhaftes Hybrid Model
Customers have the choice to have users on-prem or in the
cloud
• Manage Users and services on-prem and online, depending on your Move of workloads
enterprise users, sites to the cloud
for specific reasons.
• To secure exitent investments on prem.
Hybrid as a permanent
• Easy on- and offboarding of Exchange Mailboxes between on-prem model
and Ofice 365.
• Migration of remote users for better performance
• Hosten of data in specific regions because of compliance or security
• Migration to dthe Cloud whenever you want
On-Premises
Deployment of
users or sites
11. Online and On-Premises
Features
Hybrid deployments keeps your flexibility for Support of Features, please check back on public
availability of Office 365 vnext
Not available Features in Not available in SharePoint Not available Features in
Exchange Online Online Lync Online
• Hierarchical address book and • Central administration • Voice to PSTN
segmenting of your Global Adress
book • Powershell • Enterprise Voice and PBX
• Language support of Exchange • Full-trust Code
VoiceMail
• Customized OWA Templates,
Logos and add-ins
• old APIs
14. Deployment Planning
Source Identity
Size
Server Management
Exchange Large On-
IMAP Medium Premises
Lotus Small Single
Notes Sign-On
Google On-Cloud
Hybrid Provisioning
Hybrid DEPLOYMEN DirSync
Exchange T PLAN Bulk
sharing Migration Provisioning
features solution is part
of the plan
16. Summary of Migration Options *
Cutover migration
IMAP Migration
Staged migration
IMAP migration
Simple Migrations
2010 Hybrid
2013 Hybrid
Supports wide range of email platforms
Email only (no calendar, contacts, or tasks)
Cutover Exchange Migration (CEM)
Good for fast, cutover migrations
No migration tool or computer required on-premises
Exchange 5.5
Staged Exchange Migration (SEM) Exchange
No migration tool or computer required on-premises 2000
Requires Directory Synchronization with on-premises AD Exchange
2003
Exchange
Hybrid Deployment
Hybrid
2007
Manage users on-premises and online
Exchange
Enables cross-premises calendaring, smooth
migration, and easy off-boarding 2010
Exchange
2013
Notes/Domino
18 GroupWise
17. Hybrid – Stages vs. Hybrid
Feature Staged Hybrid
Mail routing between on-premises and cloud (recipients on either side)
Mail routing with shared namespace (if desired) - @company.com on both sides
Unified GAL
Free/Busy and calendar sharing cross-premises
Mailtips, messaging tracking, and mailbox search work cross-premises
Exchange Sharing
OWA Redirection cross-premise (single OWA URL for both on-premises and cloud)
Exchange Online Archive
Exchange Management Console used to manage cross-premises relationship & mailbox
migrations
Native mailbox move supports both onboarding and offboarding
Mailbox Move
No outlook reconfiguration or OST resync required after mailbox migration
Online Mailbox Move allows users to start logged into their mailbox while it is being moved to the
cloud
Secure Mail ensure emails cross-premises are encrypted, and the internal auth headers are
preserved
Secure Transport
Centralized mailflow control, ensures that all email routes inbound/outbound via On Premises
19
18. Architecture
Bronze Sky customer Trust Federation
premises Gateway
Exchange
Online
Active Directory Authentication
Federation platform SharePoin
Server 2.0
IdP t
Online
IdP MS Online Provisioning
Directory Sync
Directory Lync
AD platform
Store Online
Service
connector
Admin Portal
19. Identity Options Comparison
2. MS Online IDs 3. Federated IDs
1. MS Online IDs
+ DirSync + DirSync
Appropriate for Appropriate for Appropriate for
• Smaller orgs without • Medium/Large orgs • Larger enterprise orgs
AD on-premise with AD on-premise with AD on-premise
Pros Pros Pros
• No servers required • Users and groups • SSO with corporate
on-premise mastered on-premise cred
• Enables co-existence • IDs mastered on-
Cons scenarios premise
• No SSO • Password policy
Cons controlled on-premise
• No 2FA
• No SSO • 2FA solutions possible
• 2 sets of credentials to
manage with differing • No 2FA • Enables co-existence
scenarios
password policies • 2 sets of credentials to
• IDs mastered in the manage with differing
cloud password policies Cons
• Server deployment • High availability server
required deployments required
22. Cutover Migration
• Target
• Fast, simple, for small companies
• Full Transfer to the Cloud
• Requirements
• Less than 1.000 User
• Identity Management in the Cloud (and on Premise)
• Outlook Anywhere
• Functions
• No On Premise Deployment necessary
• Migration from Exchange Server 2003
• On-premise or hosted systems
24. Staged Migration
• Target
• For small, medium businesses
• needs
• Directory Sync
• Function
• Migration for Exchange Server 2003, 2007, 2010…
• Migration in Batches (start it as long as you like, when you
like)
26. Hybrid Deployment
• Target
• Large companies
• Needs
• ADFS Serverfarm HA
• Directory Sync
• Function
• Migration from Exchange Server 2003 and 2007
• Migration with Mailbox Move
• Free/Busy sharing
27. Hybrid Deployment Anforderungen
On-premises organization: Exchange Server 2003
One Exchange Server 2010 SP1 CAS Server with Hub transport
Role
Directory Synchronization (DirSync) installed and working
Autodiscover and working public DNS record
Exchange Web Services and Autodiscover reachable, public
certificate
Federation trust with Microsoft Federation Gateway
30. AD FS 2.0 Deployment Options
1.Single server configuration
2.AD FS 2.0 server farm and load-balancer
3.AD FS 2.0 proxy server or UAG / TMG / Other reverse proxy
(External users, Microsoft Exchange ActiveSync®, Outlook)
Active
Directory
AD FS 2.0
Server
AD FS 2.0 AD FS 2.0
Proxy
Server Server
AD FS 2.0
Server
Proxy External
Internal Enterprise user
user Perimeter
network
37. News
• Dir Sync Tool 64bit Version verfügbar (based on Forefront
identity Manager)
http://community.office365.com/en-us/w/sso/555.aspx
• Exchange SP2 with Hybrid Configuration Wizard
• Exchange 2013 to come
38. Exchange Server 2010 SP2
• New Hybrid Configuration Wizard
• Exchange federation trust Pre-SP2: Approximately 50
• Organization relationships manual steps
• Remote domains/accepted domains
With SP2: Now only 6 manual
• Email address policies steps
• Send/Receive connector
• Forefront inbound/outbound connectors
• MRSProxy
• Pre-req checks (i.e. Office365 Active DirSync, Exchange certificates, registered custom
domains, etc…)
• New Windows PowerShell™ cmdlets
• New/Get/Set/Update-HybridConfiguration
• Namespaces improvements
• Removing requirement for unique namespace
• Providing every customer a coexistence domain, for every hybrid deployment
• Service.contoso.com is now Contoso.mail.onmicrosoft.com
40
40. SharePoint Hybrid
On-Premises Cloud Service
Coexistence
Single sign on
ADFS
Rich Coexistence
+
Complete control and ownership of Migrate some capabilities to SharePoint Microsoft will regularly deliver new
hardware, maintenance, resources, Online and access both on premises and features and capabilities to SharePoint
and administration online sites with the same domain Online
credentials
41. SharePoint Hybrid Planung
• Voraussetzungen:
• Single sign on
• ADFS
• Einheitliches User Interface mit
einheitlichen
Templates
• Flexibles Lizenzmodell
• Lokation von User Profiles, My Site,
Suche
42. Decision making
Hybrides Modell fits Hybrides Modell possible, but take care
• Split workloads and features (Features, who are not • Compliance or security
yet avalable in the cloud and/or on prem) • Complex Auditing
• Current investments in (z.B. custom code solutions) • Search over split deployment
• Network performance • Custom Code
• No central adminsitration
• Sandboxed Solutions
• NAPA
What is Hybrid?Any of the following workloads - Exchange, SharePoint or Lync is deployed in the cloud (Office 365) in coexistence with the same or any other workloads On-PremisesFor Example: Exchange Online with Exchange On-Premises and Lync On-PremisesTwo types of hybrid deployments:Hybrid within a workloadExchange Online and Exchange Server by usersSharePoint Online and SharePoint Server by sitesLync Online and Lync Server hybrid is NOT availableHybrid between workloadsExchange Online working with Lync Server enabling voicemail SharePoint Online working with Lync Server enabling presenceEtc.
Examples of Common Hybrid Models Today:The most common use of a hybrid deployment is during large migrations from On-Premises to Cloud Services
In some cases, organizations choose to continue to maintain a hybrid environment For example:Academic institutions may choose to deploy Exchange Online for their students while maintaining Exchange for faculty and staff On-Premises.Manufacturing companies may choose to keep corporate office employees On-Premises, using Exchange, SharePoint and Lync On-Premises, while supporting floor workers with the Kiosk Worker plans in Office 365.A group inside a larger organization can run a pilot of Online Services while remaining connected to users of On-Premises. When some users in an organization rely on custom line-of-business applications that do not interact with online services, they can remain in an On-Premises deployment while other users’ data is moved to the cloud.Multinational corporations may have employees in subsidiaries that require data to reside in-country. Those subsidiaries may maintain their data On-Premises while the rest of the organization moves its data to the cloud.
Archiving and full IT controls not available with Lync OnlineIM & content archivingMalware scanningPowerShellFull user & group policiesInterop with video systems
Here is a summary of the migration tools and options we have with Exchange Online. Customers have choices to move to the cloud quickly with native migration options, to take a more measured approach to the cloud according to their business requirements or maintaining mailboxes on-premises and online for a longer period of time.Note: Exchange 2013 hybrid does not work with Exchange 2003. However, Exchange 2003 customers will be able to deploy Exchange 2010 hybrid with Exchange Online 15 in order to have a smoother experience to migrate to the cloud if other options are not ideal for their business requirements.(more details in the hybrid deployment module)