question

ShaneWalters-2173 avatar image
0 Votes"
ShaneWalters-2173 asked

Remove Hybrid AAD Connect and Remain in AAD

I have a client who is in a hybrid (on-prem AD with Azure AD Connect synching to AAD). We are slowly removing the computers from the on-prem AD domain and joining them to Azure AD and having the users log in with their Azure AD account. We are migrating profile information as we know that needs to be completed during this process.

The question is, once we have all workstations removed from on-prem AD so that all users are logging into their AAD joined computers with their AAD accounts. Can we simply run the command to stop synchronization (no longer use Azure AD Connect) and then the users and groups that are in AAD will be left in AAD? All users and groups that are in AAD were put there by Azure AD Connect. We are hoping they are left there untouched once we are ready to cutover.

azure-ad-connectazure-ad-hybrid-identity
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
0 Votes"
michev answered ShaneWalters-2173 commented

If the goal is to remove any dependencies on on-premises AD, all you need to do is disable dirsync. Any previously synchronized objects will be converted to "cloud" ones and you can manage them directly in Office 365/Azure AD. Do not delete objects before dirsync is disabled or move them to an out-of-scope OU, this will cause them to be removed from O365. You can do so after you disable dirsync.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Your response is exactly what we're looking to do. One other question.... to "disable dirsync" as you mentioned, do we simply run the following PowerShell script and then uninstall Azure AD Connect from the server it is running on?

Set-MsolDirSyncEnabled -EnableDirSync $false

0 Votes 0 ·