question

lydon109 avatar image
0 Votes"
lydon109 asked amanpreetsingh-msft edited

Convert On Prem Ad Connect Synched users to Cloud 365 accounts and retain current password

Hi

We have a client that has On-Prem AD that is connected to O365 via AD connect.

We are in the process of migrating away from their server(2016) to the cloud. We have stripped it back to just the user accounts(350+) that we are bringing over, no groups or GPO, etc.

We have the command to pause/stop the Ad connect, and or move the users to a new OU that does not Sync up to the O365 tenant.

But we are not sure about the step to convert the current AD Users to be Cloud Users?
Reading forms, I am seeing that the users move to a deleted user's account and we have to restore them but we need to generate new passwords.
Is there a way to retain their current password?


if you can advise,
thanks in advance

azure-ad-connectazure-ad-user-managementazure-ad-hybrid-identitywindows-365-enterprise
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered amanpreetsingh-msft edited

Hi @lydon109 • Thank you for reaching out.

From your question, I understood that you want to convert the synced users to cloud-only users and retain their existing synced passwords.

You can use the Set-MsolDirSyncEnabled PowerShell cmdlet as mentioned below, which will convert your synched users to cloud-only, retain the current passwords and stop the synchronization as well.

 Set-MsolDirSyncEnabled -EnableDirsync $false

Note: It may take up to 72 hours to complete deactivation once you have disabled DirSync through this cmdlet. The time depends on the number of objects that are in your cloud service subscription account. If the number of objects is less, it may complete within minutes as well. You cannot cancel the disable action. It will need to complete before you can take any other action, including re-enabling of DirSync. If you choose to re-enable DirSync, full synchronization of your synced objects will happen. This may take a considerable time depending on the number of objects in your Active Directory.

Read more: Turn off directory synchronization for Microsoft 365


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for that Amanpreet

Much appreciated, we thought there was more needed,
We will try that and see,

0 Votes 0 ·

@lydon109 · Have you had a chance to test it out? Feel free to tag me in you reply if you have any further questions regarding this.

0 Votes 0 ·