Skip to content

ConfigureExchangeHybridApplication modifies OrgRels between on-prem and other organizations who are using Exchange Online #2332

@githubths

Description

@githubths

Provide Version Number
25.05.15.1053

Describe the issue
ConfigureTargetSharingEpr Updated on non own OrganizationRelationship to EXO

Expected behavior
The Script updated the ConfigureTargetSharingEpr on a OrganizationRelationship that are made with a other Partner Company that is also Hosted in Exchange Online but is not our own OrganizationRelationship that are created by the HCW. The Script identify the PartnerOrg.onmicrosoft.com as the Matching domain, but our own domain is a contoso.onmicrosoft.com and not the PartnerOrg.onmicrosoft.com. The OrganizationRelationship that are created by the HCW has the Name 'On-premises to O365 - xxx-9a01-471f-bb2d-xx' end are excluded from the Script routine as we can identify by the code.

Script Output
[05/21/2025 16:26:20] : 2 OrganizationRelationship object(s) found which is in scope of the following operation
[05/21/2025 16:26:20] : Validating OrganizationRelationship: PartnerOrgOnMS - TargetAutodiscoverEpr: https://autodiscover-s.outlook.com/autodiscover/autodiscover.svc/WSSecurity
[05/21/2025 16:26:20] : Processing Microsoft domain: office365.com
[05/21/2025 16:26:20] : Domain is not part of the TargetAutodiscoverEpr Url
[05/21/2025 16:26:20] : Processing Microsoft domain: office365.us
[05/21/2025 16:26:20] : Domain is not part of the TargetAutodiscoverEpr Url
[05/21/2025 16:26:20] : Processing Microsoft domain: office365-net.us
[05/21/2025 16:26:20] : Domain is not part of the TargetAutodiscoverEpr Url
[05/21/2025 16:26:20] : Processing Microsoft domain: office.com
[05/21/2025 16:26:20] : Domain is not part of the TargetAutodiscoverEpr Url
[05/21/2025 16:26:20] : Processing Microsoft domain: cloud.microsoft
[05/21/2025 16:26:20] : Domain is not part of the TargetAutodiscoverEpr Url
[05/21/2025 16:26:20] : Processing Microsoft domain: outlook.com
[05/21/2025 16:26:20] : Exchange Online AutoDiscover endpoint detected!
[05/21/2025 16:26:20] : Processing initial cloud domain: onmicrosoft.com
[05/21/2025 16:26:20] : Matching domain name found: PartnerOrg.onmicrosoft.com
[05/21/2025 16:26:20] : Selected domain that will be used for AutoD v2 call is: PartnerOrg.onmicrosoft.com
[05/21/2025 16:26:20] : Calling: Get-ProtocolEndpointViaAutoDv2
[05/21/2025 16:26:20] : Final AutoDiscover URL is: https://outlook.office365.com/autodiscover/autodiscover.json/v1.0/Migration.8f3e7716-2011-43e4-96b1-aba62d229138@PartnerOrg.onmicrosoft.com?Protocol=EWS&ServerLocation=true
[05/21/2025 16:26:20] : Calling Invoke-WebRequestWithProxyDetection
[05/21/2025 16:26:20] : Calling Confirm-ProxyServer
[05/21/2025 16:26:20] : No proxy server configuration detected
[05/21/2025 16:26:20] : Request: 49902582-5623-66af-4710-05c3faf0d5d6 Date: Wed, 21 May 2025 14:26:19 GMT Status: 200
[05/21/2025 16:26:20] : AutoDiscover request successful
[05/21/2025 16:26:20] : ServerLocation is Exchange Online
[05/21/2025 16:26:20] : Set-OrganizationRelationship will be executed for identity: PartnerOrgOnMS with TargetSharingEpr: https://outlook.office365.com/EWS/Exchange.asmx

Additional context
The OrganizationRelationship are bevore the change
Identity : PartnerOrgOnMS
DomainNames : {PartnerOrg.com, PartnerOrg.mail.onmicrosoft.com, PartnerOrg.onmicrosoft.com}
TargetAutodiscoverEpr : https://autodiscover-s.outlook.com/autodiscover/autodiscover.svc/WSSecurity
Enabled : True
FreeBusyAccessEnabled : True
FreeBusyAccessLevel : LimitedDetails
FreeBusyAccessScope :

Identity : Federation to InternalPartner Domains
Id : Federation to InternalPartner Domains
DomainNames : {...}
TargetAutodiscoverEpr : https://autodiscover.InternalPartner.com/autodiscover/autodiscover.svc/WSSecurity
Enabled : True
FreeBusyAccessEnabled : True
FreeBusyAccessLevel : LimitedDetails
FreeBusyAccessScope :

Identity : On-premises to O365 - xxx-9a01-471f-bb2d-xx
Id : On-premises to O365 - xxx-9a01-471f-bb2d-xx
DomainNames : {contoso.mail.onmicrosoft.com}
TargetAutodiscoverEpr :
Enabled : True
FreeBusyAccessEnabled : True
FreeBusyAccessLevel : LimitedDetails
FreeBusyAccessScope :

Metadata

Metadata

Assignees

Labels

questionFurther information is requested

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions