u/evil-scholar

I have an old 2016 hybrid exchange server (yes I know it’s EOL). Not wanting to update to SE, can I just set my users to use the cloud as an SOA for exchange and shut down the hybrid?

We are using Entra Connect for sync so I understand write back may be limited but that shouldn’t be the end of the world right?

I assume user creation would be create in AD -> sync -> create Exchange mailbox in cloud? Any good documentation on this?

I’ve lost connection to my remote site, and am waiting on the ISPs to work things out. In the meantime, my production Entra AD Sync server is down. I have one prepped at another site in staging mode, however I’m a bit hesitant to put it into production, because if the other site comes up suddenly I’ll have two in production which I know is not supported.

Any advice on this? Is it possible to run the staging server as a manual sync just to get data up there while I’m waiting on the ISP?

So I've run the command on my PC:

[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'

And I get "True." That seems to indicate the cert is installed and active?

The confusing part is, going to Microsoft they say on the PC there should be a green checkmark (there is), and the text "Secure Boot is on and all required certificate updates have been applied. No further certificate changes are needed." I do not see that text, I just see "Secure boot is on, preventing malicious software from loading when your device starts up."

Is there anything else I need to check to ensure I'm using the right certificates?