New Hybrid Configuration Wizard 17.1.4600.0 spotted

Hi All,

Over a year ago, i’ve written a Script that checks for Hybrid Configuration Wizard (HCW) Updates

• Check for Hybrid Configuration Wizard Updates

Today i’ve received a Notification, that there is a new HCW Version available

Current state

Let’s check the current state.

Dedicated Hybrid App has configured to use Graph

Get-SettingOverride | where {$_.Name -eq "EnableRouteThroughMSGraphFeature"}

Entra Application only has Graph Permissions

Hybrid Configuration Wizard

Let’s run Hybrid Configuration wizard aka.ms/hybridwizard

Select “Choose Exchange Hybrid Configuration” to select some details

I’ve disabled everything exept:

• Oauth, Intra Organization connector and Organization RelationShip
• Update Coexistence Domain in Exchange Server Accepted domain an Email Address Policy
• Dedicated Exchange Server Application in Entra ID

As you can see, it will add the EWS Permission back on the dedicated Hybrid App ☹️

Update was successful

Check

As expected the EWS Permission is back on the dedicated Hybrid App

Seems like it’s still routing through Graph

Get-SettingOverride | where {$_.Name -eq "EnableRouteThroughMSGraphFeature"}

Fixing

Let’s download the Script and remove the EWS Permissions

-ConfigureExchangeHybridApplication

To be sure update the Script and set -UseGraphApiOnly

.\ConfigureExchangeHybridApplication.ps1 -ScriptUpdateOnly
.\ConfigureExchangeHybridApplication.ps1 -FullyConfigureExchangeHybridApplication -UseGraphApiOnly

Remove EWS Permissions

.\ConfigureExchangeHybridApplication.ps1 -RemoveApiPermissions "EWS"

EWS Permissions have been removed

Availability Exchange OnPrem to Exchange Online still works 😎

Summary

I was expecting a HCW that could finally work with UseGraphApiOnly dedicated Hybrid App. Probably next time…

Regards
Andres Bohren