Disable Azure AD synchronization without losing synchronized accounts

SF-6505 351 Reputation points


My client has a domain with 2 domain controllers.

Now , he want reduce the number of server on-premise. So we are looking if we can demote the on-premise domain and convert all synchronized account to be manged by azure portal.

What's the recommended method to demote the last 2 domain controllers without losing any synchronized account in azure ?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,546 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
18,636 questions
0 comments No comments
{count} votes

Accepted answer
  1. Thameur-BOURBITA 28,861 Reputation points


    Before demote the last domain controller and remove the domain, you have to disable the synchronization between Azure AD and your on-premise domain by running the following command : Set-MsolDirSyncEnabled -EnableDirsync $False

    I invite you to read the following links to learn more about the command above:

    Set-MsolDirSyncEnabled Turn off directory synchronization for Microsoft 365

    Once the Directory synchronization is off , check if all synchronized accounts in Azure AD can be managed through Azure portal. If it's Okay , you can perform the demote of the last domain controller.

    Please don't forget to mark helpful reply as answer

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful