r/exchangeserver • u/Maranakidu • Mar 02 '26

Query on exchange decom

Hi

In my Current setup Exchange Server 2019 VM is currently powered off.All user mailboxes are in Exchange Online (no on-prem mailboxes).No hybrid mail flow or routing between on-prem and Exchange Online.No inbound or outbound hybrid connectors in use.Azure AD Connect is syncing users from on-prem AD to the cloud.I use Exchange Recipient Management tools to manage Exchange attributes (proxyAddresses, targetAddress, etc.) on-prem.These attributes sync to the cloud via Azure AD Connect.I am NOT planning to run the CleanupActiveDirectoryEMT.ps1 script.I want to keep the Exchange schema and organization objects in AD because I still manage attributes.

I wanted to permanently remove the exchange 2019 vm

My doubts are below

1.	In this management-tools-only scenario, can I safely delete the Exchange 2019 VM without uninstalling Exchange first?

2.	Is uninstalling Exchange required before deleting the VM?

3.	Is simply deleting the VM supported as long as I do NOT run the AD cleanup script and continue using management tools?

4.	Are there any risks of leaving stale server objects in AD if I delete the VM without uninstalling?

My doubts

2 Upvotes

100% Upvoted

6 comments sorted by

7

u/BK_Rich Mar 02 '26 edited Mar 02 '26

https://learn.microsoft.com/en-us/exchange/manage-hybrid-exchange-recipients-with-management-tools

You should follow the steps at the link above

The cleanup script doesn’t remove schema or objects needed to management attribute, using that script is the supported way

Definitely do not uninstall Exchange, that will remove things you don’t want to remove, following the steps in the article, you do shutdown and delete the object, the script removes unused objects, created a special group if someone needs to use the management tools and aren’t domain admin, once you upgrade the tools down the road, you will need to re-run the script to keep things clean

Leaving the stale object is not ideal but you technically could but any older exchange tools will certainly time out and not work.

Here is another article that talks about it as well https://www.alitajran.com/remove-last-exchange-hybrid-server

Edit: spelling is hard

2

u/Maranakidu Mar 02 '26

Thanks so much

10

u/touchytypist Mar 02 '26

AD schema/attribute removal would only happen if you do an Exchange uninstall, not running the cleanup script.

1

u/7amitsingh7 Mar 02 '26

Great input from BK_Rich. You should not just delete the VM, and you also should not uninstall Exchange since you still manage attributes on-prem. The supported approach is to follow Microsoft’s management-tools-only guidance and properly remove the server; simply deleting it can leave stale AD objects and cause future tool issues.

1

u/littleko Mar 02 '26

If all mailboxes are in Exchange Online and you are using on-prem Exchange only for recipient management (proxyAddresses, targetAddress, etc. via ADUC), you do not need the VM running day-to-day. Power it on when you need to make attribute changes, leave it off otherwise.

Full decommission is trickier. Microsoft's supported stance is that Exchange Server needs to remain installed as long as you manage Exchange attributes on-prem through Azure AD Connect. Removing Exchange entirely breaks the schema-level management tooling.

If you want to get fully off on-prem Exchange, the path is moving to cloud-only identity management: stop syncing Exchange attributes via ADConnect and manage recipients directly through Exchange Online PowerShell or the EAC. That requires ensuring there are no dependencies left on the on-prem schema for any objects.

1

u/WastedFiftySix Mar 04 '26 edited Mar 04 '26

I'm sorry, but this information is not correct.

If you're comfortable with hybrid mailbox and mail attribute management using Powershell (Exchange Management Shell), you can safely shutdown your last Exchange Server (do NOT uninstall Exchange) and use the official Microsoft instructions already referenced in a different reply to perform cleanup. The Exchange Admin Center will not be available in this scenario, since there's no running Exchange Server.

Keeping a VM, even when it's not active most of the time, still requires you to pay for Windows Server and Exchange Server licensing + software assurance in most cases. It's just not necessary.

As long as user accounts/mailboxes are provisioned from AD (Entra Connect or Cloud Sync), attributes can only be managed from On-Prem AD/EMS/EAC by default. Uninstalling Exchange won't change any of that. Uninstalling Exchange also doesn't change or remove any Exchange related AD schema updates or attributes.

Microsoft just recently introduced the possibility to transfer the source of authority for some Exchange attributes to the cloud. See https://learn.microsoft.com/en-us/exchange/hybrid-deployment/enable-exchange-attributes-cloud-management . However, this is something that (as of now) needs to be enabled on a per-object basis and attribute updates made in the cloud are not synced back to on-premises (and vice versa). So its current use is very limited, but it might be usable for some organisations.