Overview
General Overview
Contoso, Ltd. is a national freight company in the United States. The company has 15,000 employees.
Physical Locations
Contoso has a main office in Houston and 10 branch offices that each contain 1,000, employees.
Existing Environment
Active Directory and Microsoft Exchange Server Environments
The network contains an Active Directory forest named contoso.com. The forest contains one root domain named contoso.com and 10 child domains. All domain controllers run Windows Server 2019.
The forest has Active Directory Certificate Services (AD CS) and Active Directory Federation Services (AD
FS) deployed.
You have a hybrid deployment of Exchange Server 2019 and Microsoft Office 365.
There are 2,000 user mailboxes in Exchange Online.
Each office contains two domain controllers and two Mailbox servers. The main office also contains an Edge Transport server.
The organization contains 100 public folders. The folders contain 80 GB of content.
All email messages sent to contoso.com are delivered to Exchange Online. All messages sent to on-premises mailboxes are routed through the Edge Transport server.
Advanced Threat Protection (ATP) is enabled and configured for the Office 365 tenant.
Network Infrastructure
Each office connects directly to the Internet by using a local connection. The offices connect to each other by using a WAN link.
Requirements
Planned Changes
Contoso plans to implement the following changes:
1. For all new users in the on-premises organization, provide an email address that uses the value of the Last Name attribute and the first two letters of the First Name attribute as a prefix.
2. Decommission the public folders and replace the folders with a Microsoft 365 solution that maintains web access to the content.
Technical Requirements
Contoso identifies the following technical requirements:
1. All email messages sent from an SMTP domain named adatum.com must never be identified as spam.
2. Any solution to replace the public folders must include the ability to collaborate with shared calendars.
Security Requirements
Contoso identifies the following security requirements:
1. The principle of least privilege must be applied to all users and permissions.
2. All email messages sent from an SMTP domain named fabrikam.com to contoso.com must be encrypted.
3. All users must be protected from accessing unsecure websites when they click on URLs embedded in email messages.
4. If a user attempts to send an email message to a distribution group that contains more than 15 members by using Outlook, the user must receive a warning before sending the message.
Problem Statements
Recently, a user named HelpdeskUser1 erroneously created several mailboxes. HelpdeskUser1 is a member of the Recipient Management management role group.
Users who have a mailbox in Office 365 report that it takes a long time for email messages containing attachments to be delivered.
Exhibit
Exchange Online Connector
You configure a connector as shown in the following exhibit.
