Forum Discussion

cia-ica's avatar
cia-ica
Copper Contributor
May 14, 2024
Solved

Looking for opinion: Unjoin Hybrid AD, or migrate to new tenant?

Hello,   So I have a bit of a conundrum, and I'm not sure which is the better option.   Situation:  We currently have an Entra-Hybrid AD environment.  Our local AD is a .lan domain, and has almos...
  • Gary_Clarke's avatar
    Gary_Clarke
    Jun 10, 2024

    Please see the below but don't forget to link in security and risk teams to perform a full BIA and RA for either methods. Then stick it through CAB.

     

    1. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloud. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloud. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/hybrid/common-scenarios.

    2. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.alitajran.com/disable-active-directory-synchronization/:

      • https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-uninstall.
      • https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.alitajran.com/disable-active-directory-synchronization/.
      • https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/answers/questions/325812/how-to-disconnect-ad-connect-from-local-ad.

    3. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/domain-services/delete. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/domain-services/delete.

    4. For cleaning up an existing tenant, you might consider hiring professional cleaning services. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://merrymaids.co.uk/about-merry-maids/rental-properties/for-tenants/https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://helloservices.co.uk/cleaning-services/end-of-tenancy-cleaning/, and others offer comprehensive cleaning services that could help you organize and clean up your tenant.

    5. Creating a new Tenant, setting it up with best practices, migrating the users, email, OneDrive, and SharePoint, and then re-joining the Intune devices as the final setup could be a viable option. However, it would require careful planning and execution. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.youtube.com/watch?v=KJRMr6O3PQUhttps://www.youtube.com/watch?v=CgYkWcRZhEY. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.youtube.com/watch?v=XrE1BQNyBUI. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration?view=o365-worldwidehttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration-step4?view=o365-worldwidehttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration-step3?view=o365-worldwidehttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration-step1?view=o365-worldwide.

    Please note that these are general guidelines and the exact steps may vary based on your specific setup and requirements. I hope I've covered the main caveats.

     
Gary_Clarke's avatar
Gary_Clarke
Copper Contributor
Jun 10, 2024

Please see the below but don't forget to link in security and risk teams to perform a full BIA and RA for either methods. Then stick it through CAB.

 

  1. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloud. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloud. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/hybrid/common-scenarios.

  2. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.alitajran.com/disable-active-directory-synchronization/:

    • https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-uninstall.
    • https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.alitajran.com/disable-active-directory-synchronization/.
    • https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/answers/questions/325812/how-to-disconnect-ad-connect-from-local-ad.

  3. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/domain-services/delete. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/entra/identity/domain-services/delete.

  4. For cleaning up an existing tenant, you might consider hiring professional cleaning services. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://merrymaids.co.uk/about-merry-maids/rental-properties/for-tenants/https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://helloservices.co.uk/cleaning-services/end-of-tenancy-cleaning/, and others offer comprehensive cleaning services that could help you organize and clean up your tenant.

  5. Creating a new Tenant, setting it up with best practices, migrating the users, email, OneDrive, and SharePoint, and then re-joining the Intune devices as the final setup could be a viable option. However, it would require careful planning and execution. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.youtube.com/watch?v=KJRMr6O3PQUhttps://www.youtube.com/watch?v=CgYkWcRZhEY. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://www.youtube.com/watch?v=XrE1BQNyBUI. https://learn.microsoft.com/en-us/answers/questions/843619/convert-on-prem-ad-connect-synched-users-to-cloudhttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration?view=o365-worldwidehttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration-step4?view=o365-worldwidehttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration-step3?view=o365-worldwidehttps://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-onedrive-migration-step1?view=o365-worldwide.

Please note that these are general guidelines and the exact steps may vary based on your specific setup and requirements. I hope I've covered the main caveats.

 

Resources