Domain Join to Cloud Only (AADJ) Migration without Wipe and Load!!

All organisations should be striving toward Azure AD Joined devices for the majority of their workforce, removing as many blockers as possible to make that happen.

One blocker has been the requirement to Wipe & Load devices when moving from Domain Joined to Cloud Only.

This video showcases an unsupported but awesome tool for making that migration happen WITHOUT a Wipe & Load.

#SayNoToHAADJ

Sources:

[danpowell]

Haha, I also look forward to Andrew's Friday Newsletter!!

But I didn't notice this! looks like magic. moving from AD joined to Azure AD joined device is a real bore! will certainly be checking this out.

[networkn]

Forensit Prowiz was designed exactly moving existing computers to another domain, azure AD or other combinations without a wipe.

[parkerjenson]

My company is looking to migrate fully from in on prem to cloud! This video is so helpful, appreciate it!

[alwaysdns]

Seems a good option, I have done this in the past using the USMT but need to have twice the local profile size in free disk space or a very fast network location.

[vindonhadaway]

Thanks for the video. But what configuration must take place on Azure to facilitate this?

[mikewilliams-rtdi]

can anyone help me with the folder structure, the instructions seem a bit vague?

[danielgardiner]

This is really promising however reading the instructions im slightly lost regarding on where the files are required to go for this to work?

[NDSLAB]

Question: What happens if I run this using the system account? Eg:- using the RMM tool? GUI won't display to the user, right?

[SweDownhill]

This looks incredible! One question though.. Onedrive was setup pre migration, but what happened after migration? I assume the intune policy for Onedrive (if created/assigned) would kick in, but I didn't see anything about this in your video..

Sidenote, I've had issues with signing in silently with OneDrive on AAD joined VMs despite setting up the policy in Intune. Compliant devices are excluded from requiring MFA with Conditional Access but the Onedrive app remains untouched (logged out). If anyone has got an idea what might be wrong, I'd appreciate some guideance 😊 I was thinking that maybe the device being a VM may be the reason behind this behaviour since interactive/remote logon is used via the Hyper-V manager. Haven't had the time to test with AAD joined physical hardware yet, so I don't know if the outcome will be different. (Edit: physical hardware gave the same result, so I'm still head scratching 😉)

Thanks for great content Dean!

[chadayers]

Doesn't Profile Wizard Simplify this?

[imfuctifino]

i'm looking to do this transfer from hybrid to entra ID AD joined , is this still the best way (other than wipe and load) given this video is over a year old ?

[spitzer]

I have seen many of nice hacks using power shell script, but these cant be used in Production but good to know 😊

[PhilCrombieMTB]

Heya, I'm looking for a video that helps with steps to move away from hybrid and ad connect to just Cloud. Do you have a video that shows how to get rid of ad connect and just run with Entra after hybrid (for users) has been in place? Thanks for all the content you create!

[cyphernz]

For domain join only (not hybrid) who will the primary user be onthe device?

[Wander-iwej]

I actually do want to do a wipe and load. Can you make a video about deploying modern computers with MDT? Where MDT installs vanilla Windows 11 and Autopilot takes over?

[saulinvictus]

Hi, trying to test this. Anyone figure out the folder structure perhapss?

[bradwilson]

I'm not sure what's going wrong, but after following the video and the configuration steps from the link, it appears to do the right steps, installs onedrive (if not installed), onreboot it checks for sync and then starts the process, creating the temp account, a couple more restarts for the migration account and then get the migration complete message. In AD the device has been disabled, but it hasn't been added to Azure. And then of course, the AD accounts not longer work on the device.
Any one had this and what did I miss?

[peterkorsbjerg]

Hi, Thanks for some great content. Is this a better method for migrating from local AD to Azure AD, than using Forensit User Profile Wizard Release 24 ? I have been using Forensit for years, with very few problems.

[Uncleruckus-NRelatin]

I'm trying to test this, but his guide on setting up the directory was a little vauge. Can you explain how you set up your folder structure? I got confused because he says Download the PowerShell App Deploy Toolkit and place the contents in the “Toolkit” folder, but there is no toolkit folder in the AADMigration folder, does he mean for us to copy the appdeploy toolkit folder to the AADM folder? And when he says to place the OnedriveLib and bulk token to the files directory, is he meaning AADM\FILES or AADM\Toolkit\files as there is a files folder within the toolkit folder.

[sastreaj]

How would you recommend the final step: turn of sync and turning users into Cloud only ?