Exchange 2013 & AD (on-premise) to Office365 Migration path recommendation - active-directory

I have the following setup:
Exchange 2013 on-premise with 10 users
AD on-premise
We have Office 365 premium licenses for each person in the company and have an Azure account etc.
I have been tasked with migrating the users to Office365 and also migrating AD
The Exchange Online licenses are not yet active, so currently, there are no user mailboxes on Office365.
We want Azure AD to replace our on-premise AD as at some point, the AD and Exchange servers (on-premise) will be decommissioned.
What path would be the best for me to take to do the migration?
I have read various pages on learn.microsoft.com about AD sync and AD Connect but am not sure whether or not this is the right way to go. the docs all seem to be geared towards companies needing a hybrid setup and we don't want that, ultimately.
Tips and advice will be gratefully welcomed.
Best regards,
Neil.

Related

Microsoft 365 subscription extra-costs for registering app in Azure Active Directory Admin Center

I am a software developer and I've been working on integrating Microsoft Graph Api in my application to be able to retrieve calendar information for users. For development purposes, I have been using a Microsoft 365 Developer subscription, in which I register my app, by following https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app. This seems to be working fine with my developer subscription, so after creating a small proof of concept, now I am trying to make a time and cost estimation for this, and I have some doubts about if there are any costs for the client.
Is Azure Active Directory Admin Center available on all Microsoft 365 business plans with the "App registration" option? Or are there any other cost-related aspects I need to take in consideration?
I've searched online and found that there shouldn't be any additional costs, but since I am not really familiar with Microsoft 365 and Azure Active Directory Admin Center other than what I used for my proof of concept, I am not really sure I have the right information.
Maybe there is someone who already implemented this in production and can have a better understanding over this.
Thanks
Microsoft 365 subscription extra-costs for Microsoft Graph Api usage
1.There is no extra cost to use the API, it is open source.
and I have some doubts about if there are any costs for the client.
2.No,it's free.And only microsoft 365 subscription needs to be charged.
3.Yes,all Microsoft 365 subscriptions offer this option.
As #Nishant - MSFT Identity says,Registering apps in Azure AD does not involve any costs and Microsoft 365 E5 developer subscription​ comes with Azure Active Directory(it's free) for building advanced identity and access management solutions.
M365 subscription will have an Azure tenant associated with it and hence you can create application for authenticating to AAD using MS Graph.

Azure AD integration with Office 365

Hello and thank you for reading.
We have Office 365 users and licenses and have recently moved into Azure. We want to connect these together.
I have created a domain controller but am unsure on how to add our existing domain in.
I have tried Azure AD Connect but it asks for 'AD Domain Services administrator', which we do not have. We have no on-premise AD at all, we want to start fresh in the cloud.
Any info would be greatly appreciated.
Thank you
If you have Office 365 license then you will have Azure Active directory services by default.
If you don't have any on-premises domain then there is no need for Azure AD connect.
Azure AD connect is used to sync the users from on-prem AD to Azure AD.
In order to add and register your existing domain in Azure , please follow this article (domain controller is not needed)

Azure Active Directory to new Windows 2019 Server

we have been using office 365 E3 for the past number of years. we would like to configure a windows 2019 essentials server locally for file storage and a few shared applications (ie quickbooks multi-user).
is there a process to pull the user information from azure active directory to the local server? any advice is greatly appreciated.
thank you!!
If my understanding is correct, you really want is to be able to grant admin rights to your Azure AD users and allow them to login to the server with their regular Azure AD credentials.
If yes, then most optimum way of doing is to have on prem AD and have you user synced up from Azure AD to local AD. Azure AD Connect comes pretty handy in this scenario.
You can also take a look at Azure AD DS, Azure Active Directory Domain Services (Azure AD DS) provides managed domain services such as domain join, group policy, lightweight directory access protocol (LDAP), and Kerberos / NTLM authentication that is fully compatible with Windows Server Active Directory. You use these domain services without the need to deploy, manage, and patch domain controllers in the cloud. Azure AD DS integrates with your existing Azure AD tenant, which makes it possible for users to sign in using their existing credentials.
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/overview
Check this link as well for additional reference:
https://serverfault.com/questions/808047/how-to-manage-on-premise-servers-using-azure-ad-credentials
Hope it helps.

Azure B2B with SharePoint Online and Yammer

I have a scenario that I am hoping someone can assist me with. I have a requirement to build an extranet in SharePoint Online (Office 365).
We have a main Office 365 Tenant. There are 15 member organisations that need access and these DO NOT have Office 365. on premise only.
So I can use Azure B2B to grant access to SharePoint Sites no problems. I need the social aspect and Yammer Fits PERFECTLY but identities are separate.
I can create and External Yammer Network and invite users but obviously these are a separate set of credentials to that of Azure AD.
Has anyone done such a thing and is there a way to grant Azure B2B users access to an external Yammer network?
Yammer should allow you to sync with your Azure Active Directory. This should allow users to have the same logins.
Here is some information I found on this matter:
https://products.office.com/en-gb/yammer/yammer-network-administration

Users on an on-premise AD domain controller and use Office 365 Exchange Online

Is it possible to create Users on an on-premise AD domain controller and use "Office 365 Exchange Online" as the Exchange server with out creating the users on Office 365? or does one has to have it on both for to work?
Here's an overview for setting up directory sync for on-premises AD and O365.
And here's the Technet article that seems to walk you through each step.

Resources