Share via

Problem with migrating Classic Virtual Network

Paweł Zalewski 20 Reputation points
2023-03-23T14:42:55.1666667+00:00

On March 1st, Microsoft ended support for classic virtual networks. Unfortunately, I did not manage to migrate to the Resource Manager service in time. As a result, there is a "suspended" state on my AD DS, which was used for authentication on some of my servers.

 

I used the following guide in migration attempt:

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/migrate-from-classic-vnet#update-and-verify-virtual-network-settings

Which utilizes the following script:

https://www.powershellgallery.com/packages/Migrate-Aadds/1.4/Content/Migrate-Aadds.ps1

Unfortunately, when I reached the "Prepare for manager domain for migration" step, I received the following error:

"The manager domain is not in a state that can be prepared (Status: Suspended)".

It is clear that this is due to the status of AD DS, i.e. "Suspended".

Is it currently possible to somehow proceed with the migration using the instructions mentioned above, or is there another way?

The last resort seems to be completely deleting the current AD DS and creating a new one. Does anyone know what could be potential consequences of such an action. Could it in any way affect users who are in Azure AD?

I attatched 3 screen shots to make it more understandable.

 1

2

3

Microsoft Security | Microsoft Entra | Other
0 comments

Answer accepted by question author

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator
2023-03-27T08:16:14.2066667+00:00

@Paweł Zalewski Please send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:Givary" so that we can work with our engineering team to unsuspend the domain so that you can migrate it, you have only time till end of this week, after this week, the domains will be suspended definitely.

Was this answer helpful?

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 37,256 Reputation points Microsoft Employee Moderator
    2023-03-24T17:25:23.9266667+00:00

    @Paweł Zalewski

    Thank you for your detailed post!

    Error Message:

    The manager domain is not in a state that can be prepared (Status: Suspended)

    From your issue and screenshot, I understand that you aren't able to migrate your Classic Virtual Network to the Resource Manager model due to your Azure Active Directory Domain Services (Azure AD DS) being in a Suspended state. Prior to proceeding with the migration using the documentation that you shared, you'll have to first restore the health of your managed domain.

    Restore a suspended domain:

    To restore the health of a managed domain that's in the Suspended state, complete the following steps:

    1. In the Azure portal, search for and select Domain services.
    2. Choose your managed domain from the list, such as aaddscontoso.com, then select Health.
    3. Select the alert, such as AADDS503 or AADDS504, depending on the cause of suspension.
    4. Choose the resolution link that's provided in the alert and follow the steps to resolve it.

    A managed domain can only be restored to the date of the last backup. The date of your last backup is displayed on the Health page of the managed domain. Any changes that occurred after the last backup won't be restored. Backups for a managed domain are stored for up to 30 days. Backups that are older than 30 days are deleted.

    After you resolve alerts when the managed domain is in the Suspended state, open an Azure support request to return to a healthy state. If there's a backup less than 30 days old, Azure support can restore the managed domain.

    Since you don't have an active support plan can you please email me with the info below and one of my team members will work with you as soon as possible to get this issue resolved.

    Email: AzCommunity@microsoft.com
Subject: ATTN - James Tran & Girish
Link to this issue

    Thank you for your time and patience throughout this issue.

    If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

    Was this answer helpful?

    0 comments
  2. Manu Philip 20,651 Reputation points MVP Volunteer Moderator
    2023-03-23T14:57:30.5066667+00:00

    I suggest you to Restore the suspended domain with the help of Microsoft support team

    open an Azure support request to return the domain in a healthy state. Once the domain is back to healthy state, you will be able to migrate the Classic Virtual Network

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.