1. Exchange Online Multi-Geo Capabilities
5/28/2018 7:34 PM
BRK3248
Exchange Online Multi-Geo Capabilities
Brian Day
Sr. Program Manager, Office 365
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Office 365 Multi-Geo Capabilities at Ignite
5/28/2018 7:34 PM
Office 365 Multi-Geo Capabilities at Ignite
BRK3248 – 10:45 AM, Exchange Online Multi-Geo Capabilities
BRK2378 – 4:30 PM, Understanding Multi-Geo Capabilities in Office 365
BRK3263 – 10:45 AM, Multi-Geo Capabilities in OneDrive and SharePoint Online
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. What is EXO with Multi-Geo capability?
Contoso.onmicrosoft.com
20K EXO Users in NAM
5K on-premises in EUR
5K on-premises in AUS
ON-PREM EUR 5K
EXO NAM 20K
ON-PREM AUS 5K

4. What is EXO with Multi-Geo capability?
Contoso.onmicrosoft.com
Let’s move some mailboxes to Japan!
Let’s add some European capacity!
Wait…. there’s MORE!
We aren’t done yet!
Let’s add some Australian capacity!
Unlocking your options.
20K EXO Users in NAM
5K EXO users in EUR
5K EXO users in AUS
12K EXO Users in NAM
5K EXO users in EUR
5K EXO users in AUS
8K EXO users in JPN
20K EXO Users in NAM
5K EXO users in EUR
5K on-premises in AUS
20K EXO Users in NAM
5K on-premises in EUR
5K on-premises in AUS
ON-PREM EUR 5K
EXO NAM 12K
EXO NAM 20K
EXO EUR
You Get…
EXO EUR 5K
EXO JPN
EXO JPN 8K
One tenant!
Same SMTP namespace!
Same GAL!
Same admins!
One point of management!
Data residency to fit your needs!
ON-PREM AUS 5K
EXO AUS
EXO AUS 5K

5. What we are…. ….and what we aren’t.
5/28/2018 7:34 PM
What we are…. ….and what we aren’t.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Control where your user data is located Empower your global workforce
5/28/2018 7:34 PM
What we are…
Office 365 Multi-Geo
Meet your data residency needs by choosing where each user’s Office 365 data is stored
Control where your user data is located
Easily manage your
Office 365 tenant
Empower your global workforce
Meet your data residency needs in the cloud by storing your Office 365 data, on a per-user basis, in desired Office 365 datacenter geographies.
Use familiar in-product controls to provision a user’s Office 365 data in a desired location, and flexibly move the user’s data to adapt to evolving business needs.
Migrate data from multiple Office 365 tenants or from on-premises to a single Office 365 tenant and enable a unified communication & collaboration experience across your company.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. What we are not… Office 365 Multi-Geo
5/28/2018 7:34 PM
What we are not…
Office 365 Multi-Geo
Not developed for any of these purposes for Exchange Online.
Control what specific datacenter your user data is located
Making data follow a user cross-geo.
Performance Benefits
“We only want this user’s data in the Dublin datacenter.”
Granularity’s smallest boundary is the geo itself. We cannot pin data to specific datacenters.
“Our CEO is in the US next week for meetings. We want to automatically move their mailbox there when EXO sees a NAM IP accessing the data.”
Automatic mailbox relocation is only within-geo. Cross-geo moves only happen when a customer makes a configuration change. Traveling users still hit a local front-door for quick access to the MSFT network.
“We think user perf will be better if our European user mailboxes are moved from Australia to the European geo.”
Possible improvements in some scenarios as every millisecond counts, but this is not a primary goal of Multi-Geo.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Behind the curtain on EXO Multi-Geo Capabilities’ evolution.
5/28/2018 7:34 PM
Behind the curtain on EXO Multi-Geo Capabilities’ evolution.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. EXO Single Geo Topology
5/28/2018 7:34 PM
EXO Single Geo Topology
NAM
EUR
APC
WW Azure AD
Azure AD Partition
EXO Account Forest
EXO Resource Forest
Directory Sync
Directory Lookups
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. EXO Multi-Geo Topology v0.1
5/28/2018 7:34 PM
EXO Multi-Geo Topology v0.1
NAM
EUR
APC
WW Azure AD
Azure AD Partition
EXO Account Forest
EXO Resource Forest
Directory Sync
Directory Lookups
Directory Lookups
Directory Lookups
EXO Resource Forest
EXO Resource Forest
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. EXO Multi-Geo Topology v1.0
5/28/2018 7:34 PM
EXO Multi-Geo Topology v1.0
NAM
EUR
APC
WW Azure AD
Azure AD Partition
EXO Resource Forest
Directory Sync
Directory Lookups
NAM
EUR
APC
WW Azure AD
Azure AD Partition
EXO
Cross Region Account Forest
EXO Resource Forest
Directory Lookups
Directory Lookups
Directory Lookups
EXO Resource Forest
EXO Resource Forest
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. EXO Multi-Geo Topology v1.0 with Go-Local
5/28/2018 7:34 PM
EXO Multi-Geo Topology v1.0 with Go-Local
NAM
EUR
APC
WW Azure AD
Azure AD Partition
EXO Resource Forest
Directory Sync
Directory Lookups
“Go Local”
“Go Local”
EXO
Cross Region Account Forest
Directory Lookups
Directory Lookups
EXO Resource Forest
EXO Resource Forest
EXO Resource Forest
EXO Resource Forest
CAN
JPN
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. A tenant’s journey to Multi-Geo
5/28/2018 7:34 PM
A tenant’s journey to Multi-Geo
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. 5/28/2018 7:34 PM
Enabling tenant for Multi-Geo Subject to change, this is all pre-release.
Tenant is relocated from a normal AF to a Cross-Region Account Forest (CRAF).
Tenant added to a white list in AAD to expose new cmdlets
Tenant AAD configuration performed to enable Multi-Geo and add desired services/geos.
If hybrid customer, AAD Connect upgraded to v or later
If hybrid customer, customer configures AAD connect for PDL sync (more on that soon)
Tenant EXO configuration performed by MSFT to add desired Geos
AAD User Objects updated with new PDL
Mailboxes automatically relocated to the desired Geo
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Tenant is relocated from a normal AF to a CRAF
Non-Impactful move, end users are unaffected during cutover.
Times vary depending on the number of objects in your AAD tenant. During preview we’ve seen tenants take 6+ months, we’ve not got it down to weeks and are still improving the speed of this process.

16. Tenant added to a white list in AAD to expose new cmdlets
Set-MsolCompanyMultiNationalEnabled
Enables Multi-Geo for a particular service (Exchange, OD4B, etc..) and sets the default Geo.
Set-MsolCompanyAllowedDataLocations
Adds additional Geos for each service.
Get-MsolCompanyAllowedDataLocations
Views current AAD tenant Multi-Geo configuration

17. Tenant AAD configuration performed to enable Multi-Geo and add desired services/geos.

18. Hybrid Customers, AAD Connect Upgraded and configured for PDL sync.
On-Premises AD is authoritative for sync’d objects in hybrid scenarios.
AAD Connect v or later is required for hybrid customers. This version can sync what we call the PDL value from on-premises AD to AAD.
The PDL, aka PreferredDataLocation, attribute will not be extended into the on-premises AD Schema. Customers will choose a single-value attribute on- premises to sync with.
More on PDL later…

19. Tenant EXO configuration performed by MSFT to add desired Geos
PS C:\> Get-OrganizationConfig | select -ExpandProperty AllowedMailboxRegions
AUS=ausprd01.prod.outlook.com
NAM=namprd03.prod.outlook.com
JPN=jpnprd01.prod.outlook.com
EUR=eurprd03.prod.outlook.com
APC=apcprd02.prod.outlook.com
PS C:\> Get-OrganizationConfig | FL DefaultMailbox*
DefaultMailboxRegion : NAM
DefaultMailboxRegionLastUpdateTime : 12/7/2016 9:14:20 PM

20. User Objects updated with new PDL
5/28/2018 7:34 PM
User Objects updated with new PDL
PreferredDataLocation is the attribute that controls where a user’s data is stored. This attribute is shared across Exchange Online, OneDrive for Business, and Skype for Business.
Hybrid Customers will choose a single-value attribute on-premises to sync with.
Azure AD as
PreferredDataLocation
On-Premises AD Attribute e.g. CustomAttribute10
AAD Connect Performs Attribute Re-Mapping
EXO Cross Region
Account Forest as MailboxRegion
PS C:\> Get-Mailbox brian.day | FL Identity,MailboxReg*
Identity : brian.day
MailboxRegion : NAM
MailboxRegionLastUpdateTime : 4/6/2017 4:58:13 PM
PS C:\> Get-MsolUser -UserPrincipalName | FL UserPrincipalName,PreferredDataLocation
UserPrincipalName :
PreferredDataLocation : NAM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Mailboxes automatically relocated to the desired Geo
Once MailboxRegion is set, the mailbox load balancing service takes over.
Approximately every 6 hours it scans tenants for “violations.”
Violation = Mailbox located in a database not matching MailboxRegion.
Once a violation is detected, the mailbox is then put into a pending move request list. The actual move request is injected at a later time.
Moves are not instantly started.

22. Client Access & Authentication
5/28/2018 7:34 PM
Client Access & Authentication
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Client Access and Multi-Geo
There are no changes to client access or authentication traffic flows.
Clients continue to use outlook.office365.com and not a “regional” namespace.
Use of the same namespace makes DNS query and client egress points very important!

24. Exchange Online and Central Egress (Bad)
Microsoft Ignite 2016
Exchange Online and Central Egress (Bad)
5/28/2018 7:34 PM
Egress Point
Worldwide reach
EUR
London
Helsinki
Chicago
Durham
Cardiff
Amsterdam
NAM
Magdeburg
Toronto
Quincy
Dublin
Des Moines
Quebec City
Busan
Seoul
Paris
Blue Ridge
Kawaguchi
Tokyo
San Jose
Frankfurt
Marseille
Beijing
JPN
Cheyenne
Vienna
Osaka
Boydton
Shanghai
Mumbai
Hong Kong
San Antonio, TX
Pune
Chennai
Fortaleza
Kuala Lumpur
SAF
Singapore
Rio De Janeiro
AUS
Campinas
SAM
Sao Paulo
Santiago
Johannesburg
Sydney
Cape Town
Melbourne
= EXO Datacenter
= Front Door
Regional/Geo – NAM, EMEA, APC, LATAM
Go-local – Canada, UK, India, Japan, Australia, France, South Korea
Sovereign – China, Germany 1
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Exchange Online and Local Egress (Good!)
Microsoft Ignite 2016
Exchange Online and Local Egress (Good!)
5/28/2018 7:34 PM
Worldwide reach
Egress Point
Egress Point
EUR
London
Helsinki
Chicago
Durham
Egress Point
Cardiff
Amsterdam
NAM
Magdeburg
Toronto
Quincy
Dublin
Des Moines
Quebec City
Busan
Seoul
Paris
Blue Ridge
Kawaguchi
Tokyo
San Jose
Frankfurt
Marseille
Beijing
JPN
Cheyenne
Vienna
Osaka
Boydton
Shanghai
Mumbai
Hong Kong
San Antonio, TX
Pune
Chennai
Egress Point
Fortaleza
Kuala Lumpur
SAF
Singapore
Egress Point
Rio De Janeiro
AUS
Campinas
Egress Point
SAM
Sao Paulo
Santiago
Johannesburg
Sydney
Cape Town
Melbourne
= EXO Datacenter
= Front Door
Regional/Geo – NAM, EMEA, APC, LATAM
Go-local – Canada, UK, India, Japan, Australia, France, South Korea
Sovereign – China, Germany 1
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Frequently Asked Questions
5/28/2018 7:34 PM
Frequently Asked Questions
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Common Questions
Q: Is there a maximum # of geos a tenant can purchase?
A: No.
Q: Do you need a minimum # of seats in a specific geo?
A: No, but the feature is currently targeted for customers of 10,000 or more paid seats.
Q: What kind of EXO data can we move outside of the home Geo?
A: User mailboxes, legacy shared mailboxes, Office 365 groups.

28. Common Questions
Q: Can I use this with O365 China or O365 Germany or O365 Government?
A: No, only normal world-wide geos are eligible.
Q: Is this a Go-Local move?
A: No. Go-Local moves move 100% of a tenant to a newly established Go-Local region such as Japan, or Australia, or Canada.
Q: Can we change our home geo?
A: No, this is not possible. The home geo is based on where your tenant is originally created.

29. Common Questions Q: What about EOP?
A: All EOP processing is performed in the tenant’s default geo.
Q: How does this affect Hybrid?
A: No changes at this time, though a customer could play with regional SMTP domains and conditional based routing.
Q: Are users impacted during the move?
A: No, these are online moves just like a normal EXO mailbox move.

30. Common Questions
Q: Do mailboxes have to be migrated from on-premises into the home geo first?
A: No, mailboxes can be migrated directly into the satellite geos.
Q: Can I provision new mailboxes directly into the satellite geo for users without a mailbox?
A: Yes, by setting the user’s PDL before enabling them for a mailbox.
Q: How can I tell if a mailbox has been moved?
A: The ‘Database’ attribute seen with Get-Mailbox will update after the relocation is complete with a new name. The first three characters will match the PreferredDataLocation value (also can look at ‘MailboxRegion’).

31. 5/28/2018 7:34 PM
Where and when?
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. SINGLE OFFICE 365 TENANT SPANNING MULTIPLE GEOS
Available geos & services in Multi-Geo
Global Geos
Asia-Pacific
Australia
Canada
European Union (EMEA)
India1
Japan
United Kingdom
United States (North America)
South Korea1
To be launched
France
AVAILABLE SERVICES
• Exchange Online IN PREVIEW
• OneDrive for Business IN PREVIEW
• SharePoint Online IN DEVELOPMENT
1 India and South Korea Geos are currently only available for customers with licenses and billing addresses in those geos

33. Roadmap and Key Moments
5/28/2018 7:34 PM
Roadmap and Key Moments
Multi-Geo Tentative GA
EXO & ODB Preview (Apr)
Ignite
(Sept)
CY17 Q2
CY17 Q3
CY17 Q4
CY18 Q1
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

34. Demo (time and luck permitting)
5/28/2018 7:34 PM
Demo (time and luck permitting)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Please evaluate this session
Tech Ready 15
5/28/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. 5/28/2018 7:34 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.