Microsoft Exchange Online
Microsoft Exchange Online is Microsoft's hosted business email and calendar service. It stores organizational mailboxes in Microsoft datacenters while administrators control recipients, domains, mail routing, protection, access, and retention through Microsoft 365.
itWindows and Microsoft infrastructure | OpenSkills.info
Intro
Microsoft Exchange Online
Microsoft Exchange Online is a hosted messaging service for organizational email, calendars, contacts, and tasks. Microsoft operates the mailbox servers in its datacenters. Your organization controls the tenant configuration: identities, recipients, accepted domains, routing, protection, permissions, and data governance.
Exchange Online is one workload inside Microsoft 365. Microsoft Entra ID supplies identities and authentication. Exchange Online stores mailbox data and routes messages. Built-in cloud-mailbox protection filters threats. Outlook and other supported clients provide user access. Microsoft Purview can apply retention, eDiscovery, and information-protection controls where the subscription includes them.
This division matters during troubleshooting. A user can sign in but lack an Exchange license. A licensed mailbox can exist while DNS sends new mail elsewhere. A delivered message can be hidden in quarantine. A deleted item can remain preserved because a retention rule or hold still applies. "Email is down" is therefore a starting report, not a diagnosis.
The service boundary
An Exchange Online organization belongs to one Microsoft 365 tenant. Each licensed user normally has a user mailbox. Other recipient types model different purposes:
- A shared mailbox gives several delegated users one address and message store.
- Room and equipment mailboxes represent bookable resources.
- Distribution groups deliver one message to a defined membership.
- Dynamic distribution groups calculate membership from recipient properties.
- Microsoft 365 groups combine a shared conversation and calendar with resources in other Microsoft 365 workloads.
- Mail contacts and mail users represent people whose delivery address is outside the organization.
A recipient is any mail-enabled object that can receive a message. A mailbox is both a recipient and a data store. Confusing the two leads to errors: a contact can appear in the address book without owning a mailbox, while a shared mailbox can store data without having its own interactive sign-in.
Administrators work through the Exchange admin center and Exchange Online PowerShell. The admin center is useful for inspection and focused changes. PowerShell is useful for repeatable changes, bulk operations, and properties that the portal does not expose. Both operate against the service; neither is the source of identity for a synchronized object whose authoritative attributes remain on-premises.
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://learn.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-online-service-description
Supports
- Exchange Online as hosted email, calendar, contacts, and tasks integrated with Microsoft Entra ID
- Multi-tenant Microsoft-hosted mailbox infrastructure, plan boundaries, administration surfaces, protection, clients, migration, and recovery features
- https://learn.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-online-limits
Supports
- The existence and variability of mailbox, message, recipient, rule, migration, and reporting limits
- Message-size behavior and non-delivery reports for over-limit messages
- https://learn.microsoft.com/en-us/exchange/recipients-in-exchange-online/recipients-in-exchange-online
Supports
- Recipient definition and user, shared, resource, group, contact, mail-user, and public-folder distinctions
- https://learn.microsoft.com/en-us/exchange/collaboration-exo/shared-mailboxes
Supports
- Shared-mailbox delegation and the distinction among Full Access, Send As, and Send on Behalf
- https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/mail-flow-best-practices
Supports
- Cloud-only, third-party gateway, hybrid, and application-relay mail-flow patterns
- MX, SPF, DKIM, and DMARC roles in Exchange Online delivery
- https://learn.microsoft.com/en-us/defender-office-365/email-authentication-about
Supports
- SPF source authorization, DKIM signatures, DMARC alignment, forwarding failure modes, and ARC
- https://learn.microsoft.com/en-us/purview/exchange-online-uses-tls-to-secure-email-connections
Supports
- TLS protection of connections among Exchange systems and external mail servers
- The boundary between transport encryption and message-level controls
- https://learn.microsoft.com/en-us/defender-office-365/eop-about
Supports
- Default anti-malware, anti-spam, and anti-phishing protection for cloud mailboxes
- Filtering order, quarantine, message trace, reporting, and deferred-message queuing
- https://learn.microsoft.com/en-us/defender-office-365/mdo-about
Supports
- Defender for Office 365 protection layers, Safe Links, Safe Attachments, investigation, hunting, and response
- Microsoft Defender for Office 365 placement in the Exchange Online protection market
- https://learn.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/mail-flow-rules
Supports
- Conditions, exceptions, actions, modes, and in-transit scope of mail flow rules
- Difference between organization transport rules and Inbox rules
- https://learn.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/trace-an-email-message
Supports
- Message trace as evidence for received, rejected, deferred, and delivered states
- Difference between single-message trace and trend reporting
- https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/validate-connectors
Supports
- Connector validation, activation, competing connector checks, and destination testing
- https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/enhanced-filtering-for-connectors
Supports
- Original-sender filtering considerations when another service precedes Microsoft 365
- https://learn.microsoft.com/en-us/exchange/exchange-hybrid
Supports
- Hybrid routing, shared namespace, address list, free-and-busy, mailbox moves, and administration
- Added directory synchronization, certificates, connectors, server, and authority dependencies
- https://learn.microsoft.com/en-us/purview/retention-policies-exchange
Supports
- Recoverable Items, retention evaluation, deletion paths, inactive mailboxes, and preservation precedence
- https://learn.microsoft.com/en-us/purview/edisc-hold-types-mailboxes
Supports
- Litigation Hold, eDiscovery hold, and Microsoft Purview retention controls for Exchange mailboxes
- https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/setup-with-modern-authentication
Supports
- Microsoft Entra ID as identity provider and OAuth, multifactor, and certificate-based modern authentication
- https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online
Supports
- Basic authentication removal, protocol effects, OAuth support for POP, IMAP, and SMTP AUTH, and EWS guidance
- Timeline milestones in 2018, 2020, 2022, and 2023
- https://learn.microsoft.com/en-us/lifecycle/announcements/exchange-online-basic-auth-deprecated
Supports
- September 2019 announcement of Basic authentication deprecation and Modern authentication replacement
- https://learn.microsoft.com/en-us/powershell/exchange/connect-to-exchange-online-protection-powershell
Supports
- Supported interactive, delegated, and app-only Exchange Online PowerShell connection paths
- https://learn.microsoft.com/en-us/microsoft-365/admin/manage/assign-licenses-to-users
Supports
- License assignment as a prerequisite to user access to subscription services
- https://learn.microsoft.com/en-us/exchange/mailbox-migration/mailbox-migration
Supports
- Exchange Online migration methods and the narrower data coverage of IMAP migration
- https://learn.microsoft.com/en-us/office365/enterprise/microsoft-365-tenant-to-tenant-migrations
Supports
- Tenant-to-tenant migration planning across domains, identity, applications, and Exchange data
- https://github.com/sindresorhus/awesome
Supports
- Discovery starting point for topic-specific awesome lists
- https://github.com/awesome-foss/awesome-sysadmin
Supports
- Curated inclusion of Imapsync and Thunderbird in the Mail Clients section
- https://imapsync.lamiral.info/
Supports
- Imapsync as an IMAP mailbox copying and migration tool
- https://www.thunderbird.net/
Supports
- Thunderbird as an open-source desktop email client
- https://source-docs.thunderbird.net/en/latest/backend/oauth.html
Supports
- Thunderbird support for OAuth authentication with major email providers
- https://news.microsoft.com/source/2011/06/28/microsoft-launches-office-365-globally/
Supports
- June 2011 global availability of Office 365 with Exchange Online
- https://news.microsoft.com/source/2013/02/27/microsoft-releases-next-generation-office-365-for-business-2/
Supports
- February 2013 worldwide availability of the major Office 365 business-service update including Exchange Online
- https://www.microsoft.com/en-us/microsoft-365/blog/2015/08/04/new-features-coming-to-outlook-on-the-web/
Supports
- August 2015 change from Outlook Web App branding to Outlook on the web and the associated Exchange Online rollout
- https://www.microsoft.com/en-us/microsoft-365/blog/2016/10/19/guide-to-inbox-management/
Supports
- October 2016 Focused Inbox behavior and rollout toward Office 365 customers
- https://www.microsoft.com/microsoft-365/exchange/exchange-online
Supports
- Microsoft Exchange Online product placement as hosted organizational email and calendar
- https://workspace.google.com/products/gmail/
Supports
- Google Workspace Gmail as a custom-domain hosted business-mail alternative
- https://www.zoho.com/mail/
Supports
- Zoho Mail as business email hosting with custom domains, administration, calendar, and migration support
- https://proton.me/business/mail
Supports
- Proton Mail business email and calendar with custom domains, central administration, privacy-oriented encryption, and migration
- https://www.fastmail.com/business/
Supports
- Fastmail business custom-domain email, calendar, administration, and migration
- https://www.proofpoint.com/us/products/email-protection
Supports
- Proofpoint gateway and API email-protection placement for Microsoft 365 environments
- https://www.mimecast.com/products/email-security/
Supports
- Mimecast email security placement with Microsoft 365, Google Workspace, and on-premises email
- https://www.barracuda.com/products/email-protection
Supports
- Barracuda email protection for Microsoft 365 through API or mail-flow deployment and added response, backup, and archiving layers
- https://www.bittitan.com/migrationwiz/sources-and-destinations/
Supports
- MigrationWiz mailbox migration endpoints for Microsoft 365, Exchange, Gmail, IMAP, archives, and public folders
- https://www.quest.com/on-demand/
Supports
- Quest On Demand tenant-to-tenant migration across Exchange and other Microsoft 365 workloads
- https://www.codetwo.com/office-365-migration/
Supports
- CodeTwo mailbox moves from Exchange, hosted Exchange, IMAP, and other Microsoft 365 tenants into Exchange Online
- https://www.veeam.com/products/saas/backup-microsoft-office-365.html
Supports
- Veeam independent backup and recovery coverage for Exchange Online and other Microsoft 365 workloads
- https://learn.microsoft.com/en-us/lifecycle/announcements/basic-auth-deprecation-exchange-online
Supports
- October 2022 start of permanent Basic authentication disablement for affected Exchange Online protocols
- https://www.microsoft.com/en-us/security/business/siem-and-xdr/microsoft-defender-office-365
Supports
- Microsoft Defender for Office 365 product placement for phishing, business email compromise, and collaboration protection