I have disabled synchronization, now what?

Question

I am taking our organization fully online and eliminating on-prem servers. Everything I could find on the subject (on and off Microsoft) said just to disabled Synchronization using this command: Set-ADSyncScheduler -SyncCycleEnabled $false then uninstall Entra Connect from the server (like it could be that simple)

This resulted in a slew of connection errors and notifications about the server being offline and not available. Entra Connect still has errors on the seamless single sign-on (SSSO) for the domain. I found a command that should disable SSSO but no info on whether this might have consequences: Call Enable-AzureADSSO -Enable $false

What should be my next steps to finalize this migration?

Answer 1

The changes you have done thus far only affect the "client" side, you need to also disable synchronization from Entra side as well. This is done via PowerShell: https://learn.microsoft.com/en-us/microsoft-365/enterprise/turn-off-directory-synchronization?view=o365-worldwide

Once you do this, any synced object will be "converted" to cloud one and you will be able to manage them directly and fully in Entra. Keep in mind it might take a while for the backend update to complete, depending on the number of objects you are syncing.