Deploying a hybrid environment is one of the most complicated tasks a system administrator faces during migration to Office 365. It might take weeks of collecting data about the infrastructure, reading publications, planning migration stages and testing. What is more, even with all this effort, there is no guarantee that everything will turn out just fine. This article gives a step by step guide to getting through the Exchange/Office 365 Hybrid Configuration Wizard (HCW). After that, I give an insight into what actions the HCW performs in the background. Finally, the last section is a guide on how to analyze logs and solve problems connected with deploying a hybrid environment.
To go straight to an activity performed by Hybrid Configuration Wizard, click on one of the links below:
- Validating On-premises and Online Exchange Connection
- Collecting data about Exchange configuration from the on-premises Active Directory
- Collecting information on the Exchange online (Office 365) configuration
- Creating new Federation Trust and the required certificate in the local Exchange
- Creating new Hybrid Configuration Object in the local Active Directory
- Changing settings of on-premises Exchange server
- Configuring Organization Relationship between the local server and the cloud
- Setting connectors on both Exchange servers
- Enabling MRS Proxy
- Configuring OAuth
Exchange/Office 365 Hybrid Configuration Wizard
Configuring your environment using the Exchange Hybrid Configuration Wizard is one of the most critical moments before the actual migration. This tool is used to configure your local domain and Office 365 tenant, so that your on-premises Exchange can merge with Exchange Online, resulting in the creation of a single, hybrid organization.
Before you run the HCW, you need to prepare:
- Credentials of an on-premises Exchange user who is a member of the Domain Admins security group
- Credentials of the Office 365 Global Administrator
- Office 365 plan which supports hybrid deployment (Enterprise, Government, Academic or Midsize)
The Wizard can be started from Exchange Admin Center (EAC) by going to the “hybrid” tab.
Clicking on the “configure” button redirects you to the Office 365 login page. To continue, you have to enter your tenant’s global administrator credentials. By default, administrator’s login has the following format: [emailprotected] In a few seconds, a page with a download link should appear:
Clicking on the link will start the download of the Office 365 Hybrid Configuration Wizard Installer. The HCW installation should start automatically. If the installation does not start on its own, just run the recently downloaded installer and follow the steps on the screen.
At this stage, the installation process should be completed, and ashortcut to the HCW should have appeared on the desktop. The Wizard should start automatically. If not, run it using the shortcut.
On the next screen, the wizard either searches automatically for the right Exchange server or waits for the user to specify it. In Exchange 2010 or Exchange 2013 it must point to the server with the Client Access Server Role. Another option is to set the location from which the Office 365 is hosted for the company. In most cases, it is Office 365 Worldwide.
At this point, you need to enter credentials of your on-premises admin and its cloud counterpart.
After entering the credentials, the Wizard attempts to log into each server using PowerShell. It is done in order to verify that the credentials, necessary for the Hybrid deployment to be completed, are valid.
Note that in this step, there is an option to “use current Windows credentials”. If the on-premises admin validation does not work, you should unmark the checkbox and enter the right user’s credentials manually.
The next step is setting up Federation Trust. Federation Trust is a required feature for the full Hybrid deployment. It enables sharing calendar free/busy information within a Hybrid environment, between all users.
Here, the Office 365 Hybrid Configuration Wizard lists your domains along with information if the Autodiscover service is available. From the domains’ list, you have to choose your public domain or domains, remembering that Autodiscover has to be configured correctly for them. At this stage, you will also need to prove you are the domain’s owner. For each domain there, a token is generated.
In your DNS, you have to create a TXT record for each of your domains, with a value corresponding to the token generated in the HCW. After having created the TXT records, you should wait for a while so that the records propagate throughout the network. When the TTL (time to live) has passed, click on “I have created a TXT record for each token in DNS” and “verify domain ownership”. The Exchange Hybrid Configuration Wizard will check whether the tokens are visible on your domain’s DNS. After the verification is complete, go to the next screen.
Now the HCW asks you how the connection between Exchange online and Exchange on-premises should be established. The first choice depends on whether you have Microsoft Edge Server or not. The next option – “Enable centralized mail transport” enables your on-premises Exchange server to function as a smart host. Thanks to that, all outbound emails sent from Office 365 have to go through the on-premises server. It gives the possibility of central management of mail flow rules and signatures throughout the company. All from one place and applied to every mail, regardless of the source of the email.
In the next window, you choose the server which is to receive emails sent from Office 365. The server should have appropriate SMTP certificate on port 25. This port also cannot be blocked by any firewall software or by the router. You can easily check which certificate does your server have with the help ofthis site.
The next step is determining on which server a Send Connector will be. Remember that the public IP address of your Exchange server should point to its internal IP address. Apart from that, the server should have its SPF (Sender Policy Framework) record configured. The PTR record should resolve the IP address to the hostname present in the certificate for SMTP service. The name is usually in format “smtp.domain.com”, or “mail.domain.com”.
The Office 365 Hybrid Configuration Wizard will also ask you to identify the Transport Certificate between on-premises Exchange and Office 365. The certificate is used to ensure secure communication between those servers.
The last step is entering the fully qualified domain name (FQDN) for the on-premises organization. FQDN is resolved to the public IP address and enables mails to be routed to the on-premises Exchange. On this address, the Exchange server is listening on port 25 and 443 (EWS, OWA). FQDN’s format usually is like in this example: mail.domain.com.
After pressing the “next” button, the HCW starts connecting the Office 365 with the local Exchange into a single hybrid organization.
If everything goes well and the Wizard does not encounter any difficulties, the following window will show:
Easy, right? However, this is where most admins wonder what was changed in their infrastructure and what to do to ensure that everything is in order.
Analyzing Hybrid Configuration Wizard logs (thorough analysis)
Hybrid Configuration Wizard, after taking input from the administrator, performs a series of activities divided into several workflows. Information on the execution of those tasks can be viewed in the wizard’s log. The log is in the following location:
%AppData%\Roaming\Microsoft\Exchange Hybrid Configuration
In this localization, there should be three files. The most important one is the txt file.
By analyzing the txt file, you can check every task performed by the Wizard. For example, you can check if the Wizard finished activity successfully and how much time did it spend on it. Also, in most cases, you can learn what kind of cmdlet was used to achieve it. The HCW normally executes the following activities:
- Validating On-premises and Online Exchange Connection.
Simply speaking, the Hybrid Configuration Wizard checks if it is possible to connect to both servers with PowerShell. You can easily find the log entry which provides data on this activity by searching for the following phrase:
Activity=OnPremises Connection Validation and Activity=Tenant Connection Validation
It will come in handy whenever the HCW is unable to connect with On-premises Exchange or Exchange Online
- Collecting data about Exchange configuration from the on-premises Active Directory
At this point, the Wizard gathers information about the local domain. In order to do that, the HCW executes a series of Get- cmdlets. You can check which cmdlets are used by searching for this phrase:
Activity=OnPremises Connection Validation, Session=OnPremises, Cmdlet=
As you can see in the log, HCW executed Get-OrganizationConfig command and managed to get one result, namely: “OrganizationConfig”.
- Collecting information on the Exchange online (Office 365) configuration
This task repeats what has been done in the previous step, only for the Exchange online, instead of the on-premises one. The results can be found by typing the following phrase in the Find window:
Activity=Tenant Connection Validation, Session=Tenant, Cmdlet=
In the example, Get-AcceptedDomain returned three results. It means that in this Office 365 tenant there are three domains. Their exact names are present just below the found phrase.
- Creating new Federation Trust and the required certificate in the local Exchange:
In the log file, it can be found using this phrase:
Activity=Enable Federation Trust
If the activity is finished successfully, a new certificate should appear on the on-premises Exchange certificates’ list. The new certificate includes “Federation” in its Subject field. To make sure the certificate is there, you can run a cmdlet: Get-ExchangeCertificate. The results will look like this:
- Creating new Hybrid Configuration Object in the local Active Directory:
The newly created object can be viewed in a few ways:
CN=Hybrid Configuration,CN=Hybrid Configuration,CN=<organization’s_name>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<domain>,DC=<domain>
- Through Exchange Management Shell:
Get-HybridConfiguration
- In the HCW logs, by going to the following phrase:
Functionality=RunWorkflow, Workflow=Hybrid
In the screenshot, you can also see when the wizard executed the command “New-HybridConfiguration”.
- Changing settings of on-premises Exchange server:
EmailAddressPolicy – adds address @tenant.mail.onmicrosoft.com
Configures remote domains – adds tenant.mail.onmicrosoft.com and tenant.onmicrosoft.com
Adds new accepted domain – adds tenant.mail.onmicrosoft.com
The data about those activities can be found between the following phrases:
[Functionality=RunWorkflow, Workflow=Hybrid, Task=Recipient] START
[Functionality=RunWorkflow, Workflow=Hybrid, Task=Recipient] FINISH
Changes can also be viewed with the following cmdlets:
Get-EmailAddressPolicy | FL Name,EnabledEmailAddressTemplates
Get-RemoteDomain
Get-AcceptedDomain
- Configuring Organization Relationship between the local server and the cloud.
This configuration is not necessary in minimal hybrid deployment. Thanks to the correct configuration, it is possible to synchronize free/busy status of mailboxes’; elements between the on-premises Exchange and Exchange online. To find information on the task’s progress, you can search for the following phrase.
Functionality=RunWorkflow, Workflow=Hybrid, Task=OrganizationRelationship
Set- and New commands are executed on both servers to make synchronization possible.
To view all data about the Organization Relationship, use your PowerShell console:
Get-OrganizationRelationship
- Setting connectors on both Exchange servers.
During this workflow, four connectors are set – one receive and one send connector for each server. Those connectors guarantee the mail flow between the on-premises and Exchange Online. Logs include information on this process under a phrase:
Functionality=RunWorkflow, Workflow=Hybrid, Task=MailFlow
The HCW also generates tables with information on receive and send connectors’ settings. The tables provide acomparison between the current and expected configuration. The table below presents settings of on-premises receive connector:
Another table compares actual and expected settings of send connector from on-premises Exchange to tenant.mail.onmicrosoft.com.
Cmdlets used during this stage for on-premises Exchange are:
- New-SendConnector
- Set-ReceiveConnector
And for Exchange Online:
- New-OutboundConnector
- New-InboundConnector
To sum up, if you choose “Centralized Mail Transport” option, the HCW should setup:
Two connectors in Exchange Online:
- Receive connector which identifies the organization by the name set in the TLS certificate
- Send connector which reroutes all communication through a smart host (local Exchange) that identifies itself with a certificate on port 25
Two connectors in on-premises Exchange:
- New send connector, which points to mail.onmicrosoft.com
- Default receive connector is not as much created, as modified, so that it accepts TLS connections.
- Enabling MRS Proxy
MRS Proxy makes it possible to migrate mailboxes from and to Office 365. Usually, this step is done before launching the Hybrid Configuration Wizard. However, if you didn’t do that prior to launching the wizard, it will do it for you. You can see it doing this if turn to logs to phrase:
Functionality=RunWorkflow, Workflow=Hybrid, Task=MRSProxy
- Configuring OAuth
To see how is the OAuth authentication configured, go to the phrase:
Functionality=RunWorkflow, Workflow=Hybrid, Task=IntraOrganization
A common error which occurs during this workflow is error HCW8064. It occurs whenever there is a problem with accessing the EWS virtual directory from the Internet. You can easily verify what seems to be the problem by using https://testconnectivity.microsoft.com/. On the site, choose test synchronization, notification, availability and automatic replies. Note that sometimes, despite the correct EWS configuration, the error still shows up. Then, usually restarting your Exchange server and re-launching Hybrid Configuration Wizard does the trick.
If nothing else works, you can perform manual configuration. Here is a Microsoft documentation on how to do it.
Summary
Even though Hybrid Configuration Wizard is quite simple to use, it performs some complicated tasks. Its primary task is to introduce changes in the Exchange Server infrastructure. In my opinion, it is worthwhile to look at what exactly happens, before creating a hybrid environment. This way, you will be able to predict where problems may arise. What is more, understanding the HCW logs gives an upper hand, as it lets you easily find out what is wrong and how to deal with it.
See also:
- How to merge an Office 365 account with an on-premises AD account after hybrid configuration?
- How to sync on-premises Active Directory to Azure Active Directory with Azure AD Connect?
FAQs
How do I run Exchange hybrid on configuration wizard? ›
Download the latest Hybrid Configuration Wizard from here or from the hybrid tab of the Exchange Online Admin Center. When you're prompted, click Install on the Application Install dialog. When you're prompted, click Run to open the Hybrid Configuration Wizard.
How do I find my Exchange hybrid configuration? ›To check hybrid configuration, open Exchange Admin Center in on-premises and create a mailbox. Then login with the mailbox in Outlook client and send a test email. Similarly, create a mailbox on Exchange Online and send a test mail.
What hybrid configuration wizard does? ›Hybrid configuration features
By default, the Hybrid Configuration wizard automatically enables all hybrid deployment features each time it runs. To disable specific hybrid configuration features, you need to use the Set-HybridConfiguration in the Exchange Management Shell.
The hybrid configuration option in which all Exchange Online inbound and outbound Internet messages are routed via the on-premises Exchange organization. This routing option is configured in the Hybrid Configuration wizard. For more information, see Transport options in Exchange hybrid deployments.
How do I download HCW? ›Download Hybrid Configuration Wizard
We recommend to sign in on an Exchange Server and install the HCW directly on the Exchange Server. Start Internet Explorer and copy-paste the link https://aka.ms/HybridWizard (Microsoft). If you use other web browsers, it might not work as expected.
- Log in to the system on which the product is installed.
- Open an MS-DOS command prompt window (on Windows) or a command shell (on UNIX).
- Go to the \common\bin subdirectory of the product installation directory.
- Execute the following command: On Windows: config.cmd. On UNIX: sh config.sh.
- Pre-requisites.
- Step 1: Verify you own the domain.
- Step 2: Start express migration.
- Step 3: Run directory synchronization to create users in Microsoft 365 or Office 365.
- Step 4: Give Microsoft 365 or Office 365 licences to your users.
- Step 5: Start migrating user mailbox data.
- Step 6: Update DNS records.
- See also.
- Step 1: Create an internet Send connector. ...
- Step 2: Add additional accepted domains. ...
- Step 3: Configure the default email address policy. ...
- Step 4: Configure external URLs. ...
- Step 5: Configure internal URLs. ...
- Step 6: Configure an SSL certificate.
To access the EAC in a web browser on the Exchange server itself, you can use the value https://localhost/ecp . External URL: By default, this value is unconfigured. Before you can connect to the EAC from the Internet, you need to configure the following settings: The external URL value on the ECP virtual directory.
How do I configure a hybrid port? ›- Enter system view. system-view. ...
- Enter interface view or port group view. Enter Layer 2 Ethernet interface view:interface interface-type interface-number. ...
- Configure the link type of the ports as hybrid. ...
- Assign the hybrid ports to the specified VLANs. ...
- Configure the PVID of the hybrid ports.
Why do I need a hybrid Exchange Server? ›
An on-premises Exchange Hybrid Server provides a centralized administration point. This will allow administrators to access a single Exchange Admin Center from their on-premises environment to access both the on-premises and Exchange Online Admin Center from a single browser.
How do I use hybrid configuration wizard Exchange 2013? ›When you're prompted, click Run to open the Hybrid Configuration Wizard. Click Next, and then, in the On-premises Exchange Server Organization section, select Detect the optimal Exchange server. The wizard will attempt to detect an on-premises Exchange server.
What is ECP in Exchange? ›The Exchange Control Panel (ECP) is a Web-based management interface introduced in Exchange Server 2010. Exchange administrators access the Exchange 2010 Control Panel through an Outlook Web App.
What ports need to be open for Exchange hybrid? ›- For hybrid you need port 25 to the Exchange Server directly or the Exchange Edge Role from Exchange Online. ...
- https://docs.microsoft.com/en-us/exchange/transport-routing.
- https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?
Run Exchange Management Shell as administrator. Next, run the Remove-HybridConfiguration cmdlet. Verify that the Hybrid Configuration is successfully removed. Run the Get-HybridConfiguration cmdlet, and the output will be empty.
Where is HCW installed? ›- On a standalone computer (designed as your "Agent server".
- On an Exchange Server: Exchange 2016 or later: Mailbox role. Exchange 2013: Client Access role (CAS).
Microsoft has released a new Hybrid Configuration wizard (HCW) that simplifies the configuration of a hybrid deployment, allows for more flexibility with your hybrid configuration, and ensures you are always running the most up-to-date versions of the experience.
How do I connect to Exchange Online PowerShell? ›Connect to Exchange Online PowerShell with an interactive login prompt. In the sign-in window that opens, enter your password, and then click Sign in. In PowerShell 7, browser-based single sign-on (SSO) is used by default, so the sign-in prompt opens in your default web browser instead of a standalone dialog.
How do I configure run configuration? ›- Under the Run menu, select Run Configurations...
- In the left-hand pane of the Run Configurations window, right-click "Java Application". ...
- In the Main tab, make sure that the "Main class:" is set to quickstart. ...
- Next, select the "Arguments" tab. ...
- select Apply, then Close.
To invoke the First Time Configuration Wizard through CLI, run the config_system command from the Expert shell (which is a Bash shell script /bin/config_system). Note: you have to create the Expert password first.
How do I setup a configuration server? ›
...
4. Server Configuration
- Set a secure administrator password for the server.
- Configure networking; the default network settings are usually sufficient.
- Add local admin accounts to each computer and connect them to the server.
- Step 1: Verify you own the domain. ...
- Step 2: Connect Microsoft 365 or Office 365 to your email system. ...
- Step 3: Create the cutover migration batch. ...
- Step 4: Start the cutover migration batch. ...
- Step 5: Route your email directly to Microsoft 365 or Office 365. ...
- Step 6: Delete the cutover migration batch.
Run Exchange Management Shell as administrator. Run the command to create a remote mailbox in Office 365 for existing AD user. Make use of the Enable-RemoteMailbox cmdlet. Change the tenant information to yours.
What is the hybrid environment in Microsoft 365? ›It allows you to connect your mailboxes, calendar, contacts, and more to Office 365, while also connecting your Active Directory (AD) to Office 365. This allows you to blend cloud capabilities with your physical servers and subsequently boost collaboration for all workers, regardless of location.
How do I find my Exchange URL? ›Click on Outlook on the top navigation bar, then click Preferences. Click on Accounts. Click on Advanced. The Server URL will be found under Microsoft Exchange > Server.
How do I create an Exchange SMTP address? ›For more information, see "Change user mailbox properties" in the Manage user mailboxes topic. (Note: Unified Messaging is not available in Exchange 2019.) Type the new SMTP address in the Email address box, and then click OK. The new address is displayed in the list of email addresses for the selected mailbox.
What are Exchange Server settings? ›| Setting Type | Setting Value |
|---|---|
| Exchange Server address: | outlook.office365.com |
| Exchange port: | 443 |
| Exchange username: | Your full Outlook.com email address |
| Exchange password: | Your Outlook.com password |
Try the new Exchange admin center using the URL https://admin.exchange.microsoft.com and sign in using your credentials. You can also continue to access the Classic Exchange admin center using the URL Classic Exchange admin center and sign in using your credentials.
How do I open Exchange admin? ›Way 1: Sign in to your Microsoft 365 or Office 365 account > Admin Centers > Exchange. Way 2: Directly visit the link https://admin.exchange.microsoft.com/. The URL will be redirected based on the Internet Information Services (IIS) virtual directory in the Client Access services on the Mailbox server.
How do I connect to my Exchange account? ›On the Tools menu, choose Accounts. In the left pane of the Accounts dialog box, select the account. Verify that the account settings are correct. Tip: To confirm that you are using the correct credentials, try to connect to your account from another Exchange application, such as Outlook Web App.
What is a hybrid Switchport? ›
Hybrid – hybrid port is a port connected to either switches or hosts. It can receive both tagged and untagged frames and assigns untagged frames a default configured VLAN (Port VLAN ID). It receives tagged frames with VLANs of which the port is a member (these VLANs' names are allowed).
What is Hybrid port in Cisco switch? ›A trunk port configured with 802.1Q tagging receive both tagged and un-tagged traffic. By default, switch forwards the un-tagged traffic configured in native vlan for the port or interface. The default native vlan is 1 which you can modify.
What is the difference between hybrid and trunk port? ›Trunk—A trunk port can forward packets from multiple VLANs. Except packets from the port VLAN ID (PVID), packets sent out of a trunk port are VLAN-tagged. Ports connecting network devices are typically configured as trunk ports. Hybrid—A hybrid port can forward packets from multiple VLANs.
Can you remove Exchange hybrid? ›To disable directory synchronization and uninstall Exchange hybrid. Run Get-OrganizationConfig | Format-List PublicFoldersEnabled and ensure that it isn't set to Remote. If it is set to Remote, and the public folders are something you want to continue to access, you would need to migrate them to Exchange Online.
How much RAM should an Exchange server have? ›32 GB of RAM or more installed: 32 GB plus 10 MB (32,778MB)
How do I exit Exchange hybrid mode? ›- Disable Autodiscover SCP in Exchange.
- Remove the Hybrid Configuration from Active Directory.
- Remove Connectors in Exchange Online.
- Remove the Organization Sharing from Exchange Online.
- Disable OAuth.
- In the EAC, navigate to Recipients > Mailboxes.
- Click More. , and then click Connect a mailbox. ...
- Click the disabled mailbox that you want to reconnect, and then click Connect.
- In the window that asks if you're sure that you want to reconnect the mailbox, click Yes.
- Navigate to the Classic EAC portal by clicking Classic Exchange admin center. ...
- Choose the connector you want to validate or turn on. ...
- When you select a connector for mail flow that originates in Microsoft 365 or Office 365, you can choose the Validate this connector link.
After you install a security update on a server that's running Microsoft Exchange Server, either Outlook on the web (OWA) or Exchange Control Panel (ECP), or both applications stop working on the server.
What is ECP virtual directory? ›The ECP virtual directory manages the Exchange admin center. The ECP web management interface was introduced in Exchange Server 2010. In Exchange Server 2013 and Exchange Server 2016, the EAC virtual directories and the corresponding management cmdlets still use ECP in the name.
How do I forward emails from my ECP? ›
In the Exchange admin center, navigate to Recipients > Mailboxes. On the mailbox properties page, click Mailbox Features. Under Mail Flow, select View details to view or change the setting for forwarding email messages. On this page, you can set the maximum number of recipients that the user can send a message to.
Does port 25 need to be open? ›Web servers are favored by spammers because they are relatively powerful, and because the network connection to most web servers is fast and reliable. By leaving port 25 unmonitored and open, web hosting providers are at risk of enabling spammers within their network to run wild with huge volumes of spam traffic.
How do I add a new domain in hybrid Exchange? ›- Add this domain name to Exchange on-premises admin center as an accepted domain.
- Then use an Email address policy to apply it on mailboxes. ...
- Add this new domain name as alterative UPN suffixes from Active Directory Domain and Trusts.
To check the hybrid configuration of your Exchange, simply open the Exchange admin center and navigate to the hybrid node (Fig. 2.). If the button on the setup page says enable or configure, it means that your local Exchange is not working in a hybrid deployment.
How do I run an Exchange command in PowerShell? ›- On your local computer, open Windows PowerShell, and run the following command: PowerShell Copy. $UserCredential = Get-Credential. ...
- Run the following command: PowerShell Copy. Import-PSSession $Session -DisableNameChecking.
- Click customise synchronising options.
- Enter a global Azure AD admin credentials.
- Leave these settings and click next (confirm your Active Directory Forest)
- Leave these settings and click next.
- On this screen you want to select Exchange hybrid deployment, click next.
- Open PowerShell and enter the following command: $LiveCred = Get-Credential.
- Enter the login credentials for Exchange when the window appears, and then click "OK."
- Enter the following command once the previous command has processed: Remove-PSSession $Session.
Within our app, go to Settings > Add Account > Add Email Account > Enter your email address and continue. If it does not automatically detect you are using an Exchange account, tap "not a ___ account" then tap the Exchange icon on the account setup page.
How do I connect to Exchange Server? ›On the Tools menu, select Accounts. In the left pane of the Accounts dialog box, select the account. Choose Advanced, and then select the Server tab. Under Microsoft Exchange and Directory service, select the Use SSL to connect check boxes.
How do I setup a hybrid Exchange 2013 with Office 365? ›To do so, first logon to one of the Exchange 2013 servers that are to act as hybrid servers. Then open the “Exchange admin center” and click “hybrid” in the bottom of the left pane. Under the “hybrid” page, click the “Enable” button. You will then be asked to login to Office 365 before you can continue.
Is TPM required for hybrid Azure AD join? ›
Hybrid Azure AD join is supported for FIPS-compliant TPM 2.0 and not supported for TPM 1.2. If your devices have FIPS-compliant TPM 1.2, you must disable them before proceeding with hybrid Azure AD join. Microsoft doesn't provide any tools for disabling FIPS mode for TPMs as it is dependent on the TPM manufacturer.
How do you check if hybrid Azure AD join is enabled? ›Using the Azure portal
Go to the devices page using a direct link. Information on how to locate a device can be found in How to manage device identities using the Azure portal. If the Registered column says Pending, then hybrid Azure AD join hasn't completed.
What Does Hybrid Active Directory Mean? A hybrid Active Directory tool uses multiple methods or components to deal with identity access and other network considerations. The original MS Active Directory was designed to help administrate a Windows domain.
How do I check my Exchange connection? ›- Click on the following link: https://testconnectivity.microsoft.com/tests/o365.
- Click Service Account Access.
- Complete the form. ...
- Complete the verification process and click Perform Test.