Forum Discussion

palchak's avatar
palchak
Copper Contributor
Mar 13, 2020

Migrating On Prem AD to Azure AD and doing away completely with On Prem AD

One of my customers is presently using Azure AD and they are syncing with their On Prem AD using Azure AD Connect. The authentication being used is PHS. Now, they would like to get rid of their On Pr...
Identity Management
palchak's avatar
palchak
Copper Contributor
Mar 16, 2020

009GH What about using Azure AD DS, the managed domain service in Azure, to use that, do you still need to keep the Azure Connect Sync intact , because using Azure AD DS you can create customised OUs and even Group Policies, so can AD DS be considered a replacement for On Prem AD DS.

Using the cloud Azure AD DS is a better option as it is a managed service and you don't have to spin up DCs in Azure and patch them and monitor them etc. Any comments please.

Kayak2's avatar
Kayak2
Copper Contributor
May 27, 2020

palchak  do you know of any MS documentation/guide that describes the high-level steps to achieve this?

 

Thanks

  • palchak's avatar
    palchak
    Copper Contributor
    May 27, 2020

    Kayak2Not really, I was struggling to find something. Actually AD DS is not a full fledged replacement for On Prem AD and both have separate use cases. But my customer was planning to get rid of On Prem AD and use Azure AD as their primary identity source. Have you checked this blog http://www.blogabout.cloud/2019/08/871/, this throws some light as to how to do the migration, but again, this is just one part, doesn't give you the whole picture, but I think this can be helpful to some extent

Resources