question

PierrePerret-6435 avatar image
0 Votes"
PierrePerret-6435 asked MarileeTurscak-MSFT answered

Disconnect from Local AD after joing Azure

Hello all,

We have roughly 60 users in our office. We were using an on Prem AD, and Azure at the same time. We have recently learned that out local AD is no longer working, I can see it from the Domain Controller, but we cannot make any password changes, or user changes on it as it does not talk to anything other than the DC.

The issue that we are running into is that the users that have both instances installed are unable to make changes to their passwords. We had one user that her password expired and she was no longer able to sign into her laptop anymore. We had to swap it out for one that only had Azure. We need to find a route to remove the local AD from the machines and just use Azure for the time being.

The problem I am having is when I try to disconnect from the local AD, it requires an Admin account to do so, but I cannot enter my credentials to do so.

I was able to do this on my machine, as I added an admin, and was able to disconnect, but when I rebooted I lost my profile and had to rebuild it. I also lost my bookmarks and any local files I was working on.

Any suggestions on how we can handle this removal for 60 users would be greatly appreciated.

Thanks!

Pierre

azure-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered

You can install the MSOnline (Azure AD v1 PowerShell) module, and then run Set-MsolDirSyncEnabled -EnableDirSync $false. This will disable directory synchronization on your Azure AD tenant and will convert all synchronized objects (DirSyncEnabled = True) to cloud objects(DirsyncEnabled = False).

https://docs.microsoft.com/en-us/microsoft-365/enterprise/turn-off-directory-synchronization?view=o365-worldwide
https://support.microsoft.com/en-us/kb/2619062

You can then uninstall Azure AD Connect if you are looking to completely get rid of your on-premises environment.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.