Category: cross-forest
-
Cross-Tenant Policies To Replace Free/Busy Organization Relationships
Exchange Web Services (EWS) is used to support cross-tenant free/busy lookups (between different M365/Entra ID tenants). EWS is being disabled in Exchange Online, and so any Organization Relationship that you have that allows Free/Busy cross-tenant needs to be updated to Cross-Tenant Access Policies (XTAP). Microsoft have the documentation for this at Migrate to Microsoft 365…
-
Removing Cloud Service Providers (CSP) In Entra/M365
The time comes to change or remove a CSP. So you go about your directory removing configuration that allows the CSP to have remote admin access to your tenant. You might do this anyway, even if the CSP is still a current partner, because there is the inherent risk that the CSP is a backdoor…
-
International Cross-Tenant Sync, Or Fun With Entra Sync Expressions!
I have a client with a parent company in Asia and a subsidiary in the USA and Europe. To provide cross-tenant access to the Intranet and other resources we have used Entra ID Cross-Tenant Sync to populate users from the Asian tenant into the USA based tenant. The issue with this is that the Asian…
-
Copy Links and Backlinks Between Users and Shared Mailboxes (automapping)
Automap for shared mailboxes does not work across forests when moving mailboxes. When the user is granted permission to a shared mailbox, the default behaviour of automapping means that the shared mailbox has msExchDelegateListLink set to the DN of the user, and the backlink (hidden in AD by default) on the user is populated with…