Scary the situation you're in, but not impossible, and can be solved easily by enabling "SMTP matching", which is a process of transferring the source of authority from your Office 365 to your local active directory. this can be achieved by matching the SMTP address of your Office 365 accounts to the SMTP address of your Active Directory accounts, and using the DirSync tool to sync the account information from your local AD to the Office 365 network.
In order for the SMTP matching to work, you will need to recreate the user accounts and groups from your Office 365 to your local Active Directory domain, exporting user info from your Office 365 to a CSV file might give you a good start to import the CSV info back to AD, but the problem is that the default export from Office 365 doesn't generate all the information and attributes you need to import back to active directory, and some of the attributes created from Office 365 doesn't match the attribute names in AD, so you may need to do some renaming for the attribute names in the CSV file before importing back to AD.
Mind you that you don't need ALL the attributes from Office 365 for this to work, you only need to create an account in AD that matches the same SMTP address in Office 365 to change the source of authority, all the other attributes like phone number, address, manager and so on are cosmetics at this point and can be imported later, also note that once the source of authority/information for the user accounts changes to be AD, the cosmetic user information in AD will overwrite whats on Office 365, so try your best to import/export all the available information before enabling DirSync synchronization.
If you think about it, what you really need to do will boil down to this
- Export the account information from Office 365 by using the PowerShell command
Get-MsolUser | Select <attributes> | Export-CSV -Path <FileLocation>
The usable attributes that you can use for this command are: City, Country, Department, DisplayName, Fax, FirstName, LastName, MobilePhone, Office, PasswordNeverExpires, PhoneNumber, PortalSettings, PostalCode, SignInName, Title, UserPrincipalName
- Import the account information to AD using the Powershell command
Import-CSV <FileLocation> | New-ADUser
You will need to rename/add attributes to the CSV file in order for the import process to be successful, a list of all the attributes that you can import and use can be found here: http://technet.microsoft.com/en-us/library/ee617253.aspx
Recreate your groups from Office 365 into AD, and make user placement as in the Office 365 network.
Enable SMTP matching using the following KB article: http://support.microsoft.com/kb/2641663/en-us, more information here: http://stellark.itgroove.net/2014/05/21/dirsyncsmtpmatching/
(Optional) Use the Microsoft IDFix tool to insure that the information created in AD are compaitble with the Office 365 network, the tool can be found here: http://www.microsoft.com/en-us/download/details.aspx?id=36832
Enable DirSync, a good article to follow can be found here: http://social.technet.microsoft.com/wiki/contents/articles/19098.dirsync-how-to-install-the-directory-sync-tool.aspx
(Optional) you may test migrating a couple of users first before moving your entire company, this can be done by placing your test users in an OU inside AD, and then ask DirSync to only migrate the content of the OU to Office 365, more info can be found here: http://blogs.technet.com/b/praveenkumar/archive/2014/04/11/how-to-do-ou-based-filtering-in-office-365.aspx
In theory, this will change the source of authority to your AD, and the user accounts/groups/passwords will be imported from AD to Office 365, I can't think of a anything that is going to break for your users or Office 365 if you do this with careful planning and testing.
Hope this helps, and let me know if you need to do further discussing on this, would be happy to help.
