create new user hybrid exchange

Question

I would like to know what is the correct process for creating a new user knowing that our infrastructure is hybrid and the assignment of licenses on Microsoft 365 is done through active directory groups and not directly on the individual user. Example user1 assigned to group G_Microsoft365E5 will have the Microsoft365E5 license, user2 assigned to group G_OfficeP1 will have the OfficeP1 license. Thanks in advance Simone

Answer 1

Hello Simone,

As we understand, you need to enable remote mailboxes for the users. The process with require using a business rule and a scheduled task. The rule will trigger After creating a user and mark them (e.g. by setting CustomAtributeBoolean1 to True). The scheduled task will check the mark and whether the user has a mailbox. If the conditions are met, the scheduled task will execute this script from our repository and then clear the mark. You can assign the task only over the members of the groups that are used for assigning Microsoft 365 licenses with access to Exchange Online. Finally, you should have something like the following:

Business rule Scheduled task

Comments

Thanks for your reply, but in this case the user's mailbox will enable only when the Scheduled task run. There is a possible to call the Scheduled task when the user was created?

---

Hello Simone,

It is only the remote mailbox in on-premises Exchange that will be enabled by the scheduled task. The mailbox itself will be automatically created in Exchange Online once the Microsoft 365 license is assigned. As another option, you can use the script in your business rule triggering After creating a user right next to the action adding the user to the corresponding group.

---

I tried what was proposed and the office 365 mailbox works correctly unfortunately the exchange attributes are not filled in, the mailbox is not present as an object on exchange on prem, it is not a real remote mailbox. The value of the RemoteRecipientType attribute is NONE and not ProvisionMailbox as I expected. This does not allow me to properly use the internal smtp relay on our systems. I think I need to make a powershell script where to run the Enable-remotemailbox command, correct?

---

Hello Simone,

The script we referenced does exactly the same thing and also in the background it uses the very same cmdlet. Most probably the behavior you are facing occurs because the synchronization did not take place yet. Try running AAD Connect manually and then check the attributes.

---

thanks for your patience, now everything works. The problem was related to the incorrectly assigned license