Function to convert/migrate on-premises Exchange distribution group to a Cloud (Exchange Online) distribution group

Export-DistributionGroup2Cloud.ps1

function Export-DistributionGroup2Cloud
{
  <#
      .SYNOPSIS
      Function to convert/migrate on-premises Exchange distribution group to a Cloud (Exchange Online) distribution group

      .DESCRIPTION
      Copies attributes of a synchronized group to a placeholder group and CSV file.
      After initial export of group attributes, the on-premises group can have the attribute "AdminDescription" set to "Group_NoSync" which will stop it from be synchronized.
      The "-Finalize" switch can then be used to write the addresses to the new group and convert the name.  The final group will be a cloud group with the same attributes as the previous but with the additional ability of being able to be "self-managed".
      Once the contents of the new group are validated, the on-premises group can be deleted.

      .PARAMETER Group
      Name of group to recreate.

      .PARAMETER CreatePlaceHolder
      Create placeholder DistributionGroup wit ha given name.

      .PARAMETER Finalize
      Convert a given placeholder group to final DistributionGroup.

      .PARAMETER ExportDirectory
      Export Directory for internal CSV handling.

      .EXAMPLE
      PS> Export-DistributionGroup2Cloud -Group "DL-Marketing" -CreatePlaceHolder

      Create the Placeholder for the distribution group "DL-Marketing"

      .EXAMPLE
      PS> Export-DistributionGroup2Cloud -Group "DL-Marketing" -Finalize

      Transform the Placeholder for the distribution group "DL-Marketing" to the real distribution group in the cloud

      .NOTES
      This function is based on the Recreate-DistributionGroup.ps1 script of Joe Palarchio

      License: BSD 3-Clause

      .LINK
      https://gallery.technet.microsoft.com/PowerShell-Script-to-Move-5c3cd668

      .LINK
      http://blogs.perficient.com/microsoft/?p=32092
  #>
  [CmdletBinding(ConfirmImpact = 'Low')]
  param
  (
    [Parameter(Mandatory,
    HelpMessage = 'Name of group to recreate.')]
    [string]
    $Group,
    [switch]
    $CreatePlaceHolder,
    [switch]
    $Finalize,
    [ValidateNotNullOrEmpty()]
    [string]
    $ExportDirectory = 'C:\scripts\PowerShell\exports\ExportedAddresses\'
  )

  begin
  {
    # Defaults
    $SCN = 'SilentlyContinue'
    $CNT = 'Continue'
    $STP = 'Stop'
  }

  process
  {
    If ($CreatePlaceHolder.IsPresent)
    {
      # Create the Placeholder
      If (((Get-DistributionGroup -Identity $Group -ErrorAction $SCN).IsValid) -eq $True)
      {
        # Splat to make it more human readable
        $paramGetDistributionGroup = @{
          Identity      = $Group
          ErrorAction   = $STP
          WarningAction = $CNT
        }
        try
        {
          $OldDG = (Get-DistributionGroup @paramGetDistributionGroup)
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)

          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }

        try
        {
          [IO.Path]::GetInvalidFileNameChars() | ForEach-Object -Process {
            $Group = $Group.Replace($_,'_')
          }
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)

          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }

        $OldName = [string]$OldDG.Name
        $OldDisplayName = [string]$OldDG.DisplayName
        $OldPrimarySmtpAddress = [string]$OldDG.PrimarySmtpAddress
        $OldAlias = [string]$OldDG.Alias

        # Splat to make it more human readable
        $paramGetDistributionGroupMember = @{
          Identity      = $OldDG.Name
          ErrorAction   = $STP
          WarningAction = $CNT
        }
        try
        {
          $OldMembers = ((Get-DistributionGroupMember @paramGetDistributionGroupMember).Name)
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)

          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }

        If(!(Test-Path -Path $ExportDirectory -ErrorAction $SCN -WarningAction $CNT))
        {
          Write-Verbose -Message ('  Creating Directory: {0}' -f $ExportDirectory)

          # Splat to make it more human readable
          $paramNewItem = @{
            ItemType      = 'directory'
            Path          = $ExportDirectory
            Force         = $True
            Confirm       = $False
            ErrorAction   = $STP
            WarningAction = $CNT
          }
          try
          {
            $null = (New-Item @paramNewItem)
          }
          catch
          {
            $line = ($_.InvocationInfo.ScriptLineNumber)

            # Dump the Info
            Write-Warning -Message ('Error was in Line {0}' -f $line)

            # Dump the Error catched
            Write-Error -Message $_ -ErrorAction $STP

            # Something that should never be reached
            break
          }
        }

        # Define variables - mostly for future use
        $ExportDirectoryGroupCsv = $ExportDirectory + '\' + $Group + '.csv'

        try
        {
          # TODO: Refactor in future version
          'EmailAddress' > $ExportDirectoryGroupCsv
          $OldDG.EmailAddresses >> $ExportDirectoryGroupCsv
          'x500:'+$OldDG.LegacyExchangeDN >> $ExportDirectoryGroupCsv
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)

          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }

        # Define variables - mostly for future use
        $NewDistributionGroupName = 'Cloud- ' + $OldName
        $NewDistributionGroupAlias = 'Cloud-' + $OldAlias
        $NewDistributionGroupDisplayName = 'Cloud-' + $OldDisplayName
        $NewDistributionGroupPrimarySmtpAddress = 'Cloud-' + $OldPrimarySmtpAddress

        # TODO: Replace with Write-Verbose in future version of the function
        Write-Output -InputObject ('  Creating Group: {0}' -f $NewDistributionGroupDisplayName)

        # Splat to make it more human readable
        $paramNewDistributionGroup = @{
          Name               = $NewDistributionGroupName
          Alias              = $NewDistributionGroupAlias
          DisplayName        = $NewDistributionGroupDisplayName
          ManagedBy          = $OldDG.ManagedBy
          Members            = $OldMembers
          PrimarySmtpAddress = $NewDistributionGroupPrimarySmtpAddress
          ErrorAction        = $STP
          WarningAction      = $CNT
        }
        try
        {
          $null = (New-DistributionGroup @paramNewDistributionGroup)
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)
          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }

        # Wait for 3 seconds
        $null = (Start-Sleep -Seconds 3)

        # Define variables - mostly for future use
        $SetDistributionGroupIdentity = 'Cloud-' + $OldName
        $SetDistributionGroupDisplayName = 'Cloud-' + $OldDisplayName

        # TODO: Replace with Write-Verbose in future version of the function
        Write-Output -InputObject ('  Setting Values For: {0}' -f $SetDistributionGroupDisplayName)

        # Splat to make it more human readable
        $paramSetDistributionGroup = @{
          Identity                               = $SetDistributionGroupIdentity
          AcceptMessagesOnlyFromSendersOrMembers = $OldDG.AcceptMessagesOnlyFromSendersOrMembers
          RejectMessagesFromSendersOrMembers     = $OldDG.RejectMessagesFromSendersOrMembers
          ErrorAction                            = $STP
          WarningAction                          = $CNT
        }
        try
        {
          $null = (Set-DistributionGroup @paramSetDistributionGroup)
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)

          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }

        # Define variables - mostly for future use
        $SetDistributionGroupIdentity = 'Cloud-' + $OldName

        # Splat to make it more human readable
        $paramSetDistributionGroup = @{
          Identity                             = $SetDistributionGroupIdentity
          AcceptMessagesOnlyFrom               = $OldDG.AcceptMessagesOnlyFrom
          AcceptMessagesOnlyFromDLMembers      = $OldDG.AcceptMessagesOnlyFromDLMembers
          BypassModerationFromSendersOrMembers = $OldDG.BypassModerationFromSendersOrMembers
          BypassNestedModerationEnabled        = $OldDG.BypassNestedModerationEnabled
          CustomAttribute1                     = $OldDG.CustomAttribute1
          CustomAttribute2                     = $OldDG.CustomAttribute2
          CustomAttribute3                     = $OldDG.CustomAttribute3
          CustomAttribute4                     = $OldDG.CustomAttribute4
          CustomAttribute5                     = $OldDG.CustomAttribute5
          CustomAttribute6                     = $OldDG.CustomAttribute6
          CustomAttribute7                     = $OldDG.CustomAttribute7
          CustomAttribute8                     = $OldDG.CustomAttribute8
          CustomAttribute9                     = $OldDG.CustomAttribute9
          CustomAttribute10                    = $OldDG.CustomAttribute10
          CustomAttribute11                    = $OldDG.CustomAttribute11
          CustomAttribute12                    = $OldDG.CustomAttribute12
          CustomAttribute13                    = $OldDG.CustomAttribute13
          CustomAttribute14                    = $OldDG.CustomAttribute14
          CustomAttribute15                    = $OldDG.CustomAttribute15
          ExtensionCustomAttribute1            = $OldDG.ExtensionCustomAttribute1
          ExtensionCustomAttribute2            = $OldDG.ExtensionCustomAttribute2
          ExtensionCustomAttribute3            = $OldDG.ExtensionCustomAttribute3
          ExtensionCustomAttribute4            = $OldDG.ExtensionCustomAttribute4
          ExtensionCustomAttribute5            = $OldDG.ExtensionCustomAttribute5
          GrantSendOnBehalfTo                  = $OldDG.GrantSendOnBehalfTo
          HiddenFromAddressListsEnabled        = $True
          MailTip                              = $OldDG.MailTip
          MailTipTranslations                  = $OldDG.MailTipTranslations
          MemberDepartRestriction              = $OldDG.MemberDepartRestriction
          MemberJoinRestriction                = $OldDG.MemberJoinRestriction
          ModeratedBy                          = $OldDG.ModeratedBy
          ModerationEnabled                    = $OldDG.ModerationEnabled
          RejectMessagesFrom                   = $OldDG.RejectMessagesFrom
          RejectMessagesFromDLMembers          = $OldDG.RejectMessagesFromDLMembers
          ReportToManagerEnabled               = $OldDG.ReportToManagerEnabled
          ReportToOriginatorEnabled            = $OldDG.ReportToOriginatorEnabled
          RequireSenderAuthenticationEnabled   = $OldDG.RequireSenderAuthenticationEnabled
          SendModerationNotifications          = $OldDG.SendModerationNotifications
          SendOofMessageToOriginatorEnabled    = $OldDG.SendOofMessageToOriginatorEnabled
          BypassSecurityGroupManagerCheck      = $True
          ErrorAction                          = $STP
          WarningAction                        = $CNT
        }
        try
        {
          $null = (Set-DistributionGroup @paramSetDistributionGroup)
        }
        catch
        {
          $line = ($_.InvocationInfo.ScriptLineNumber)
          # Dump the Info
          Write-Warning -Message ('Error was in Line {0}' -f $line)

          # Dump the Error catched
          Write-Error -Message $_ -ErrorAction $STP

          # Something that should never be reached
          break
        }
      }
      Else
      {
        Write-Error -Message ('The distribution group {0} was not found' -f $Group) -ErrorAction $CNT
      }
    }
    ElseIf ($Finalize.IsPresent)
    {
      # Do the final steps

      # Define variables - mostly for future use
      $GetDistributionGroupIdentity = 'Cloud-' + $Group

      # Splat to make it more human readable
      $paramGetDistributionGroup = @{
        Identity      = $GetDistributionGroupIdentity
        ErrorAction   = $STP
        WarningAction = $CNT
      }
      try
      {
        $TempDG = (Get-DistributionGroup @paramGetDistributionGroup)
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)

        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      $TempPrimarySmtpAddress = $TempDG.PrimarySmtpAddress

      try
      {
        [IO.Path]::GetInvalidFileNameChars() | ForEach-Object -Process {
          $Group = $Group.Replace($_,'_')
        }
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)

        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      $OldAddressesPatch = $ExportDirectory + '\' + $Group + '.csv'

      # Splat to make it more human readable
      $paramImportCsv = @{
        Path          = $OldAddressesPatch
        ErrorAction   = $STP
        WarningAction = $CNT
      }
      try
      {
        $OldAddresses = @(Import-Csv @paramImportCsv)
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)

        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      try
      {
        $NewAddresses = $OldAddresses | ForEach-Object -Process {
          $_.EmailAddress.Replace('X500','x500')
        }
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)

        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      $NewDGName = $TempDG.Name.Replace('Cloud-','')
      $NewDGDisplayName = $TempDG.DisplayName.Replace('Cloud-','')
      $NewDGAlias = $TempDG.Alias.Replace('Cloud-','')

      try
      {
        $NewPrimarySmtpAddress = ($NewAddresses | Where-Object -FilterScript {
            $_ -clike 'SMTP:*'
        }).Replace('SMTP:','')
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)
        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      # Splat to make it more human readable
      $paramSetDistributionGroup = @{
        Identity                        = $TempDG.Name
        Name                            = $NewDGName
        Alias                           = $NewDGAlias
        DisplayName                     = $NewDGDisplayName
        PrimarySmtpAddress              = $NewPrimarySmtpAddress
        HiddenFromAddressListsEnabled   = $False
        BypassSecurityGroupManagerCheck = $True
        ErrorAction                     = $STP
        WarningAction                   = $CNT
      }
      try
      {
        $null = (Set-DistributionGroup @paramSetDistributionGroup)
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)
        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      $paramSetDistributionGroup = @{
        Identity                        = $NewDGName
        EmailAddresses                  = @{
          Add = $NewAddresses
        }
        BypassSecurityGroupManagerCheck = $True
        ErrorAction                     = $STP
        WarningAction                   = $CNT
      }
      try
      {
        $null = (Set-DistributionGroup @paramSetDistributionGroup)
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)
        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }

      # Splat to make it more human readable
      $paramSetDistributionGroup = @{
        Identity                        = $NewDGName
        EmailAddresses                  = @{
          Remove = $TempPrimarySmtpAddress
        }
        BypassSecurityGroupManagerCheck = $True
        ErrorAction                     = $STP
        WarningAction                   = $CNT
      }
      try
      {
        $null = (Set-DistributionGroup @paramSetDistributionGroup)
      }
      catch
      {
        $line = ($_.InvocationInfo.ScriptLineNumber)

        # Dump the Info
        Write-Warning -Message ('Error was in Line {0}' -f $line)

        # Dump the Error catched
        Write-Error -Message $_ -ErrorAction $STP

        # Something that should never be reached
        break
      }
    }
    Else
    {
      Write-Error -Message "  ERROR: No options selected, please use '-CreatePlaceHolder' or '-Finalize'" -ErrorAction $STP

      # Something that should never be reached
      break
    }
  }

  end
  {
    <#
        From the original Script Author

        Name:        Recreate-DistributionGroup.ps1

        Version:     1.0

        Description: Copies attributes of a synchronized group to a placeholder group and CSV file.
        After initial export of group attributes, the on-premises group can have the attribute "AdminDescription" set to "Group_NoSync" which will stop it from be synchronized.
        The "-Finalize" switch can then be used to write the addresses to the new group and convert the name.  The final group will be a cloud group with the same attributes as the previous but with the additional ability of being able to be "self-managed".
        Once the contents of the new group are validated, the on-premises group can be deleted.

        Requires:    Remote PowerShell Connection to Exchange Online

        Author:      Joe Palarchio

        Usage:       Additional information on the usage of this script can found at the following blog post: http://blogs.perficient.com/microsoft/?p=32092

        Disclaimer:  This script is provided AS IS without any support. Please test in a lab environment prior to production use.
    #>
  }
}

<#
    BSD 3-Clause License

    Copyright (c) 2016, Joerg Hochwald <http://jhochwald.com>
    Copyright (c) 2018, enabling Technology <http://enatec.io>
    All rights reserved.

    Redistribution and use in source and binary forms, with or without
    modification, are permitted provided that the following conditions are met:

    * Redistributions of source code must retain the above copyright notice, this
    list of conditions and the following disclaimer.

    * Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.

    * Neither the name of the copyright holder nor the names of its
    contributors may be used to endorse or promote products derived from
    this software without specific prior written permission.

    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
    AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
    IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
    DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
    FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
    DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
    SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
    CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
    OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

    By using the Software, you agree to the License, Terms and Conditions above!
#>

<#
    This is a third-party Software!

    The developer(s) of this Software is NOT sponsored by or affiliated with Microsoft Corp (MSFT) or any of its subsidiaries in any way
    The Software is not supported by Microsoft Corp (MSFT)!
#>

Hi,
Do you have the original script for Recreate-DistributionGroup.ps1

Since the Gallery is retired, try this one: https://github.com/FaisalNahian/Migrating-On-Premise-Distribution-Lists-to-Microsoft-365-Exchange-Online

Sorry I know this is old but can you explain this to me like im a 5 year old. Do we run both the -createplaceholder and -finalize from the PS session connected to O365 or is one done onprem then finalized to O365? PS novice that has 600 DL that need to be migrated. Thanks!

Sorry I know this is old but can you explain this to me like im a 5 year old. Do we run both the -createplaceholder and -finalize from the PS session connected to O365 or is one done onprem then finalized to O365? PS novice that has 600 DL that need to be migrated. Thanks!
Hi @jcrossangit

first of all: You should take a close look at this repository: https://github.com/FaisalNahian/Migrating-On-Premise-Distribution-Lists-to-Microsoft-365-Exchange-Online
They seem to update it, from time to time.

But I will try to answer your questions:
Use the function like this Recreate-DistributionGroup -Group 'YOUGROUP' -CreatePlaceHolder
This will create a clone of your group, but hidden from the GAL und prepend "could_".
Apply all updates that you need, if needed. Then do syncs (Azure AD Connect).
Then check everything in the Exchange Admin Center for the Group above.
Then rund the function again: Recreate-DistributionGroup -Group 'YOUGROUP' -Finalize

That will do the real cutover!

Do some more checks, if it looks good: Delete the on premises Distribution Group! But do real checks, just in case!

How do the Cutover look like:

1. Fill the membership
2. Rename the DL (Remove the leading "could_")
3. Make the list visible

Sorry, I dropped the usage of this function. Because I decided to build custom scripts for each migration project. A kind of tailored made solution that does everything. I also decided to add an additional stop to rename the existing on Premises group and make this hidden.
I also made some more changes, like additional exports. This is, more or less, to safe more information for real documentation for each migration.

Does that answer you question?

Cheers
Josh

And just in case: the function is used against Exchange Online only.
I doesn’t cover the on Premises part, see above: One of the main reasons why I created something different

To answer your question @jcrossangit I just added a connect-exchangeonline to my script and it worked, no on-prem exchange connection, just through AD. I also added a line to add the Group_NoSync to the on-prem account in the AdminDescription field on the -CreatePalceholder section. Here's the lines in should go under and what I added. I run the createplaceholder and let it replicate, then run the finalize and it is working for me. I hope it helps you or someone else trying to figure this out. I'm running the 1.0 version and just modified it a little to make it work smoother.

         -SendModerationNotifications $OldDG.SendModerationNotifications `
        -SendOofMessageToOriginatorEnabled $OldDG.SendOofMessageToOriginatorEnabled `
        -BypassSecurityGroupManagerCheck
       $adm = get-adgroup -Identity "$oldDG";$adm.admindescription = "Group_NoSync"; set-Adgroup -instance $adm

To answer your question @jcrossangit I just added a connect-exchangeonline to my script and it worked, no on-prem exchange connection, just through AD. I also added a line to add the Group_NoSync to the on-prem account in the AdminDescription field on the -CreatePalceholder section. Here's the lines in should go under and what I added. I run the createplaceholder and let it replicate, then run the finalize and it is working for me. I hope it helps you or someone else trying to figure this out. I'm running the 1.0 version and just modified it a little to make it work smoother.

         -SendModerationNotifications $OldDG.SendModerationNotifications `
        -SendOofMessageToOriginatorEnabled $OldDG.SendOofMessageToOriginatorEnabled `
        -BypassSecurityGroupManagerCheck
       $adm = get-adgroup -Identity "$oldDG";$adm.admindescription = "Group_NoSync"; set-Adgroup -instance $adm

Awesome 👏

When is the cloud group created? I ran this and it created it as am on prem distro for the cloud- placeholder.

When is the cloud group created? I ran this and it created it as am on prem distro for the cloud- placeholder.
Here is how this is designed:

• You run it against your local Exchange, to export everything
• Disconnect from your local Exchange, or start a new (plain) PowerShell Session
• Connect to Exchange Online
• Run the function with the -CreatePlaceHolder and -Finalize Parameter

That should do the job! If you run the -CreatePlaceHolder and -Finalize within the same session, it will create everything on Premises! Make sense, right?
While, if you are connected to Exchange Online, there is no chance that anything is created on Premises, because the Exchange server could never be reached.

It sounds like you never disconnect from your local Exchange Server.

And you might want to adopt the awesome change from @sbirchfield70 above!

@jhochwald - I tried the script, its ok for groups that are non nested, for nested group it does not work.

Membership is not retained as soon any of the group (if it is member of any other group) is removed from AAD Sync.

Appreciate if you could help/guide to make this work for nested groups.

@jhochwald - I tried the script, its ok for groups that are non nested, for nested group it does not work.

Membership is not retained as soon any of the group (if it is member of any other group) is removed from AAD Sync.

Appreciate if you could help/guide to make this work for nested groups.

The Script ist about 6 years old! No wonder that it will cause issues…
What you can do: Use the idea and adopt it to all the newer command lets with the correct syntax.
And about nesting: You can read the members and identify nested/embedded groups. Be careful with it, nested groups can have circles.

I’m not having an Exchange server (not even in my Lab). Therefore I’m unable to try it.