HOW TO MIGRATE AZURE AD CONNECT TO A NEW SERVER

Question

HOW TO MIGRATE AZURE AD CONNECT TO A NEW SERVER

InfraSolutions 811

Hello Team,

I am currently in the process of migrating Azure AD Connect from one server (Windows Server 2012 R2) to another server (Windows Server 2022).

This is my first time performing this migration, so I have sought assistance from various technical forums. After researching, I have identified two standard migration steps (described below) from a trusted source. I kindly request you to review these steps and advise me on the option that involves less risk and ensures a smooth migration. If you believe any modifications are necessary, please let me know, and I will be happy to incorporate them before proceeding further.

Please note:

The difference between Migration Step 1 and Migration Step 2 is that Migration Step 1 only exports only one JSON file for Azure AD Connect,

User's image

while Migration Step 2 exports sub directories as well,

I do not want to miss any configurations from the existing server, so kindly let me know which approach I need to follow.

User's image

                                                                       __Migration step: 1__

On the old server, export the Azure AD Connect configuration.
Install Azure AD Connect on the new server.
Import the Azure AD Connect configuration on the new server.
Configure the new server to use the same Azure AD tenant and directory synchronization settings as the old server.
Test the new server to make sure that it is working properly.

Here are the detailed steps for each of these tasks:

Exporting the Azure AD Connect configuration.

Open Azure AD Connect.
Click on the Configure tab.
Click on the View or export current configuration link.
Click on the Export Settings button.
Save the JSON file to a location on your computer.

Installing Azure AD Connect on the new server

Download the latest version of Azure AD Connect from the Microsoft website.
Run the Azure AD Connect installer.
Follow the on-screen instructions to install Azure AD Connect.

Importing the Azure AD Connect configuration

On the new server, open Azure AD Connect.
Click on the Configure tab.
Click on the Import synchronization settings link.
Browse to the JSON file that you exported from the old server.
Click on the Import button.

Configuring the new server to use the same Azure AD tenant and directory synchronization settings as the old server

On the new server, open Azure AD Connect.
Click on the Configure tab.
In the Azure AD Tenant section, enter the same Azure AD tenant that you used on the old server.
In the Directory Synchronization section, make sure that the same directory synchronization settings are configured as on the old server.
Click on the Save button.

                                                                      __Migration step: 2__

1. Run the following script to export the configuration,

C:\Program Files\Microsoft Azure Active Directory Connect\Tools\MigrateSettings.ps1 -ServerConfiguration "c:\AdConnect"

2. Copy the entire directory to the new staging server or just save it for backup on another server.

3. Install Azure AD connect on a new server.

4. Import the JSON file using “Import Synchronization settings”

User's image

0 comments

Answer accepted by question author

Andy David - MVP 160.3K MVP Volunteer Moderator

Put the old server in staging mode, then disable staging mode on the new server and monitor

If everything is working as expected, then you can uninstall the old server and delete the Health Agent for it in Azure

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-health-operations#delete-a-server-or-service-instance

InfraSolutions 811 Reputation points

2023-05-19T11:59:13.37+00:00

I have imported the JSON file on the new server and completed the configuration.

Note: Before configuring Azure AD Connect on the new server, I enabled staging mode.

I have also noticed that both services (Azure AD Connect Health Sync & Microsoft Azure AD Sync) are now running on the new server.

Could you please assist me with what my next recommended steps are?

I checked the synchronization status and it shows that the full synchronization was successful.
InfraSolutions 811 Reputation points

2023-05-19T12:14:13.97+00:00

Ah, I apologize for the confusion. Yes, as mentioned in your previous post, the next recommended step would be to put the old server in staging mode, disable staging mode on the new server, and monitor the synchronization process. am i correct?
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T12:20:22.7+00:00

Correct, but before you do, verify the config and the expected export on the new server
InfraSolutions 811 Reputation points

2023-05-19T12:49:57.81+00:00

I followed your instructions and executed the provided command lines. However, when I opened the CSV file, I noticed that it did not contain any data.

Csexport "Name of the connector" C:\temp\export.xml /f:x

CSExportAnalyzer C:\temp\export.xml > c:\temp\export.csv
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T12:54:10.84+00:00

Assuming you are checking the correct connector name, That tells me you dont have anything to export or no changes have been made. How many objects are you syncing. Based on the screen shots above, your syncs are very quick.
InfraSolutions 811 Reputation points

2023-05-19T12:59:58.21+00:00

I have taken the connector name from this location,

It appears that the synchronization is occurring every few minutes. This is the current update from the synchronization service manager,

Am i missed anything here??
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T13:11:18.02+00:00

Is anything being exported to Azure? Only changes will be, thats what that that verify check is looking for. IF you were to put both servers in Staging Mode, then make a change to a synced object on-prem, that should get picked up by the new server and show up in:

Csexport "Name of the connector" C:\temp\export.xml /f:x

CSExportAnalyzer C:\temp\export.xml > c:\temp\export.csv
InfraSolutions 811 Reputation points

2023-05-19T13:15:03.2533333+00:00

Apologies for asking multiple questions. As we are nearing the completion of the migration, I would like to seek your assistance in navigating each step smoothly and without encountering any issues.

For testing purposes, I added a new AD account in our on-premise environment and performed a delta sync on the new server. Within a few seconds, a new account appeared in the O365 admin portal. Subsequently, I deleted the account from AD and performed another delta sync, and the account was successfully removed from the O365 admin portal.

Does it mean everything looks good, or how should I verify if Azure AD Connect is functioning correctly on the new server?

Screenshot taken from Admin portal:
InfraSolutions 811 Reputation points

2023-05-19T13:21:06.3366667+00:00

For your previous question: - I have enabled staging mode on the existing server and unchecked staging mode on the new server.

"Is anything being exported to Azure?" -
I exported the JSON file from the existing server and imported it into the new server. Other than that, I didn't make any other changes.
InfraSolutions 811 Reputation points

2023-05-19T13:54:55.2333333+00:00

Can I uninstall Azure AD Connect from our existing server.?
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T14:43:36.9466667+00:00

Ok, if the export was successful using the new server and its no longer in staging mode and things look good, you can uninstall aadconnect from the old server
InfraSolutions 811 Reputation points

2023-05-19T14:52:16.4633333+00:00

Thank you very much for your assistance, Andy David - MVP. You saved my day
InfraSolutions 811 Reputation points

2023-05-24T09:45:00.1666667+00:00

I have enabled staging mode on the old server and unchecked the staging option on the new server. When I add a new user in the on-premise AD, I see the change history in both the old and new server's synchronization service manager. Is this expected? or Did I miss anything here?

3 additional answers

Your answer

InfraSolutions 811 Reputation points

2023-05-19T11:59:13.37+00:00

I have imported the JSON file on the new server and completed the configuration.

Note: Before configuring Azure AD Connect on the new server, I enabled staging mode.

I have also noticed that both services (Azure AD Connect Health Sync & Microsoft Azure AD Sync) are now running on the new server.

Could you please assist me with what my next recommended steps are?

I checked the synchronization status and it shows that the full synchronization was successful.
InfraSolutions 811 Reputation points

2023-05-19T12:14:13.97+00:00

Ah, I apologize for the confusion. Yes, as mentioned in your previous post, the next recommended step would be to put the old server in staging mode, disable staging mode on the new server, and monitor the synchronization process. am i correct?
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T12:20:22.7+00:00

Correct, but before you do, verify the config and the expected export on the new server
InfraSolutions 811 Reputation points

2023-05-19T12:49:57.81+00:00

I followed your instructions and executed the provided command lines. However, when I opened the CSV file, I noticed that it did not contain any data.

Csexport "Name of the connector" C:\temp\export.xml /f:x

CSExportAnalyzer C:\temp\export.xml > c:\temp\export.csv
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T12:54:10.84+00:00

Assuming you are checking the correct connector name, That tells me you dont have anything to export or no changes have been made. How many objects are you syncing. Based on the screen shots above, your syncs are very quick.
InfraSolutions 811 Reputation points

2023-05-19T12:59:58.21+00:00

I have taken the connector name from this location,

It appears that the synchronization is occurring every few minutes. This is the current update from the synchronization service manager,

Am i missed anything here??
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T13:11:18.02+00:00

Is anything being exported to Azure? Only changes will be, thats what that that verify check is looking for. IF you were to put both servers in Staging Mode, then make a change to a synced object on-prem, that should get picked up by the new server and show up in:

Csexport "Name of the connector" C:\temp\export.xml /f:x

CSExportAnalyzer C:\temp\export.xml > c:\temp\export.csv
InfraSolutions 811 Reputation points

2023-05-19T13:15:03.2533333+00:00

Apologies for asking multiple questions. As we are nearing the completion of the migration, I would like to seek your assistance in navigating each step smoothly and without encountering any issues.

For testing purposes, I added a new AD account in our on-premise environment and performed a delta sync on the new server. Within a few seconds, a new account appeared in the O365 admin portal. Subsequently, I deleted the account from AD and performed another delta sync, and the account was successfully removed from the O365 admin portal.

Does it mean everything looks good, or how should I verify if Azure AD Connect is functioning correctly on the new server?

Screenshot taken from Admin portal:
InfraSolutions 811 Reputation points

2023-05-19T13:21:06.3366667+00:00

For your previous question: - I have enabled staging mode on the existing server and unchecked staging mode on the new server.

"Is anything being exported to Azure?" -
I exported the JSON file from the existing server and imported it into the new server. Other than that, I didn't make any other changes.
InfraSolutions 811 Reputation points

2023-05-19T13:54:55.2333333+00:00

Can I uninstall Azure AD Connect from our existing server.?
Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator

2023-05-19T14:43:36.9466667+00:00

Ok, if the export was successful using the new server and its no longer in staging mode and things look good, you can uninstall aadconnect from the old server
InfraSolutions 811 Reputation points

2023-05-19T14:52:16.4633333+00:00

Thank you very much for your assistance, Andy David - MVP. You saved my day
InfraSolutions 811 Reputation points

2023-05-24T09:45:00.1666667+00:00

I have enabled staging mode on the old server and unchecked the staging option on the new server. When I add a new user in the on-premise AD, I see the change history in both the old and new server's synchronization service manager. Is this expected? or Did I miss anything here?

Answer 1

Samdi 46

Everything is explained in the below article:

https://www.alitajran.com/migrate-azure-ad-connect/

0 comments

Answer 2

Andy David - MVP 160.3K MVP Volunteer Moderator

Use the wizard in AADConnect - option 1

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-import-export-config

You would only use option 2 if:

If an existing server doesn't support settings management, you can either choose to upgrade the server in-place or migrate the settings for use on a new staging server

InfraSolutions 811 Reputation points

2023-05-19T11:16:51.76+00:00

Thank you very much for your response. @Andy David - MVP

I just downloaded the JSON file from the existing server and copied it to a new server. After importing the JSON file to the new server, do I need to shut down the Azure AD Connect on the existing server? Is uninstalling the software enough?

Answer 3

Sophién FELKAOUI 0

Hello,

On the new server where I want to install Azure AD Connect, I unfortunately don't have the import option.

How can I get it?

It's a Windows server 2012 r2 datacenter server

Sean Campbell 0 Reputation points

2024-02-20T17:42:00.39+00:00

Hi, I'm guessing you're running Microsoft Entra Connect Sync V1, as Microsoft stopped supporting V1 installations on Windows Server 2012 Editions from 1st October 2023 so your server may stop syncing identities from on-premises Active Directory to Microsoft Entra ID. The Sync service will need to be moved to another server running 2016 or newer to install V2, (or upgrade that server). The image is what a customer of ours received in September 2023 - hope this helps.
shockoMS 281 Reputation points

2024-06-06T15:53:09.01+00:00

@Andy David why option 1? I looked at the JSON file the export from the wizard creates but whilst it does contain the sync rules it does not appear to contain the sync settings such as whether write backs are to be used, the OU filtering in place, the sync of extended attributes etc. It seems like an incomplete method no?
Pascal Grout 0 Reputation points

2024-06-28T20:06:39.4333333+00:00

Why do you use Windows 2012 R2, this is out off support , use Windows 2022!

Share via

HOW TO MIGRATE AZURE AD CONNECT TO A NEW SERVER

3 additional answers

Your answer