How to extend on-premise Active Directory schema with Exchange attribute for hybrid mailbox management

Applies to: Cayosoft Administrator 4.x, 5.x

---

 

Video Tutorial

 

Step 1: Extending the on-premises Active Directory schema with Exchange Attributes

NOTE: You do not need to perform a full installation and configuration of Exchange Server. To enable mailbox commands for Exchange Online in Hybrid environment, it is enough to perform instructions from Step 1 described below.

If you don't have Exchange On-Premises running in your environment, Active Directory may not include exchange attributes that are required to manage mailbox settings in the cloud for user or group accounts that are synced using Azure AD Connect. For example, changing the Hide From GAL setting for a mail-enabled user or distribution list would not be possible from the Exchange Online because the solution expects a synced user to be the authoritative source (AD in this case) of that type of change.

To perform these operations you need to extend your Active Directory schema with Exchange attributes.

1. Download the Exchange distributive (Exchange 2016 or 2019) and extract it to a local folder on a server in your domain. You can find the download links here: https://docs.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates?view=exchserver-2019&wt.mc_id=MVP 
2. Follow the instructions provided in the "Prepare Active Directory and domains" article, "Step 1. Extend the Active Directory schema" section: https://technet.microsoft.com/en-us/library/bb125224(v=exchg.160).aspx#Step1
3. If you have Azure AD Connect running in your environment, update its configuration, as described in the next section below.

Step 2: Refresh the Directory schema in Azure AD Connect

After you extend the Active Directory schema, you need to refresh the schema in your Azure AD Connect sync tool to add sync rules for Exchange to its configuration. Please follow the instructions here: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-installation-wizard#refresh-directory-schema

Be aware, that this action regenerates the Sync Rules. If you have any customized synchronization rules in Azure AD Connect, you will need to recreate them after refreshing the schema.