Migrate DC SERVER to Azure AD

Question

Hi,
I hope you all are doing well....

We are using an active directory with windows server 2012 on Aws so at the moment we have to log in to Windows Server to create an account and with Azure Connect the user is created on Office365.

We have bought the Intune with E3 license and all our systems are enrolled on Intunes..

Can somebody explain how can i transfer make the settings that we can directly create office365 users without having to login to dc as we no longer need gpo or any other settings from that server all our deployments are done through intune and we have Integrated Okta to do the logins of users...

Answer 1

Hi @Zeeshan Peter

Thank you for asking this question on the **Microsoft Q&A Platform. **

You can create a user directly in your Azure AD connect, but the user will not synchronize on your Active Directory.

Also, in your Intune, you must allow Azure AD Joined device/user

Hope this helps,

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

Answer 2

You'll need to utilize Azure AD Connect and enable Group Writeback. This will allow writing back to your on-premises Active Directory and essentially syncing groups and users between the two. how-to-connect-group-writeback-v2

You may want to also enable Password Writeback, this will allow password resets from the admin portal or the use of self-service password reset and will ensure that it syncs and updates the user's on-premises AD password as well. This works both ways, reset/change a user's password in on-prem AD will sync with AAD. tutorial-enable-sspr-writeback

----------

Please accept as an answer if this was helpful.

Answer 3

Hi @Zeeshan Peter , if you want to turn off directory synchronization and convert your synchronized users to cloud-only users, please follow this guide:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/turn-off-directory-synchronization?view=o365-worldwide

Hope it helps.