Users and workstations migration from On premise Windows AD to Azure AD

Allan Stark 501 Reputation points
2022-08-11T12:16:29.69+00:00

We plan to completely abandon the ground-based infrastructure of On Prem Windows AD, since we do not have any services left in our office that would require integration with local AD.
Group policies are also used very limitedly, only for core users software installation and mapping network drives.
Our main working software has a cloud version for a long time so our users work with it through a web-browser.
At the moment ~50 our users already using MS 365 Business Premium subscription.
Azure AD Connect is configured on one of our local DC.
All workstations are Azure AD hybrid joined.
We plan to finally replace old network folders by SharePoint online sites and OneDrive.
We also want to switch to using the Intune service as an alternative to managing user devices.
By switching to cloud/Azure AD identification, we want to reduce the presence of server equipment in the office to a minimum, ideally, only a router, WAPs and a couple of network printers.

Do I understand correctly that in order to migrate the user profile and his workstation into AzureAD, it is enough to perform the following steps?

  1. Unjoin workstation from the Windows AD domain.
  2. Stop the sync for that user in a local AD / Azure AD Connect, restore the user from Azure AD deleted and specify his new password.
  3. Join workstation to the Azure AD (Azure AD Joined) and migrate user profile using any of the utilities (https://ppm.laplink.com or https://forensit.com) from Windows AD type to Azure AD.
  4. Update the ImmutableID attribute for the user on Azure AD to $null via PowerShell

Is there any way to automate this process?

Are there any problems with transferring user settings when converting profiles?
I tested and found that the Outlook 365 mail profile was successfully converted, but the Chrome browser settings were not transferred to the new profile (I user forensit and did not use sync with my Google account in Chrome).

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,664 questions
{count} votes