Recently we had to switch a customer primary SMTP domain from abc.com to dce.com due to legal ramification. This particular customer is running in a Hybrid mode Office 365 scenario with Exchange and AD On-Prem and in this case that business unit is fully…

This is affecting all my users. RADAR is only archiving some messages and it's completely random. Any help from Sophos here would be great.