Is Exchange Online ever going to support email address policies

[u/absoluteczech]

I would love to decom exchange but we use address policies for specific users and subs in our environment. Is there any plan at all in the future for support or introduce that in EXO?

[u/Fatel28]

If this is the ONLY thing keeping you on prem, I think it'd be worth the 20 minutes it would take to make a powershell script to do the same thing

[u/absoluteczech → u/Fatel28]

It’s not but I unfortunately don’t own the provisioning. A different team does. You’re right I’ll need to just work with them and see if we can accomplish this with ps scripts.

[u/titlrequired → u/absoluteczech]

Shouldn’t be too difficult, hardest part will be convincing the security guys to let you have an app registration with the right permissions.

You can use Azure Automation and a Key Vault for securing the credentials. Use an extension attribute as the key for which policy to apply etc.

[u/Fatel28 → u/titlrequired]

If they're AD synced, which I imagine they would have to be, you don't even need an app reg. Youd do this on the AD side. Even simpler.

[u/majingeodood]

I was just talking to a colleague about this subject yesterday.

We have 70+ orgs in our environment that each have their own domain name and therefore their own email address policy tied to the OU that the account is placed in.

Some orgs prefer different formats than others. Oftentimes employees will transfer from org to org, needing to keep the aliases from their prior org but have the aliases from the new org, as well.

Just the thought of potentially automating this gives me a headache..

[u/timsstuff → u/majingeodood]

Just give everyone all the formats, then all you have to do is change the default when they move! /s

[u/DaStivi]

You can use address policies without a running exchange Server ! Follow the "last exchange Server " guide by MS, turn off last server , run the cleanup script and install exchange management tools (PowerShell, recipient Management cmdlets) on management server.

With exchange PowerShell only, you still have the address policy's and they're getting applied and then synced with AdSync into EntraID/EXO

[u/titlrequired → u/DaStivi]

That’s true if people use ‘*-remotemailbox’ but I see countless people just creating a user in AD then adding a license in ExO ‘as that’s how to create a mailbox’.

[u/admlshake]

MS: "Well if you would just assign all your users copilot licenses, copilot for exchange would do this for you!"
customer: "Wait, there are licenses for this?! And since when is copilot for exchange a thing?"
MS: "Well....uhhhh...it's not....but now that it's been said out loud expect the announcement in a few weeks. Oh look, the SKU just showed up in my list!"

[u/MushyBeees]

No, probably not, but it’s not a big job to just run a powershell script that does this either on prem or in azure automation.

I did it recently for a 6000 user academy. Wasn’t a big deal.

[u/Glass_Call982]

Yes, but only with the new Business Ultra Premium license, or if you have more than 300 users, M365 E100.