SOLVEDHow to Migrate Azure AD Connect to a New Server

MJ-Tech

MJ-Tech

Well-Known Member
182
15
18
Dear Team,

I am currently in the process of migrating Azure AD Connect from one server (Windows Server 2012 R2) to another server (Windows Server 2022).

This is my first time performing this migration, so I have sought assistance from various technical forums. After researching, I have identified two standard migration steps (described below) from a trusted source. I kindly request that you review these steps and advise me on the option that involves less risk and ensures a smooth migration. If you believe any modifications are necessary, please let me know, and I will be happy to incorporate them before proceeding further.

Please note:

The difference betweenMigration Step 1andMigration Step 2is thatMigration Step 1only exports only one JSON file for Azure AD Connect,

1684492071729.png

whileMigration Step 2exports sub directories as well,

1684492080026.png

I do not want to miss any configurations from the existing server, so kindly let me know which approach I need to follow.


Migration step: 1

  1. On the old server, export the Azure AD Connect configuration.
  2. Install Azure AD Connect on the new server.
  3. Import the Azure AD Connect configuration on the new server.
  4. Configure the new server to use the same Azure AD tenant and directory synchronization settings as the old server.
  5. Test the new server to make sure that it is working properly.
Here are the detailed steps for each of these tasks:

出口the Azure AD Connect configuration.


  1. Open Azure AD Connect.
  2. Click on the Configure tab.
  3. Click on the View or export current configuration link.
  4. Click on the Export Settings button.
  5. Save the JSON file to a location on your computer.
Installing Azure AD Connect on the new server

  1. Download the latest version of Azure AD Connect from the Microsoft website.
  2. Run the Azure AD Connect installer.
  3. Follow the on-screen instructions to install Azure AD Connect.
Importing the Azure AD Connect configuration

  1. On the new server, open Azure AD Connect.
  2. Click on the Configure tab.
  3. Click on the Import synchronization settings link.
  4. Browse to the JSON file that you exported from the old server.
  5. Click on the Import button.
Configuring the new server to use the same Azure AD tenant and directory synchronization settings as the old server

  1. On the new server, open Azure AD Connect.
  2. Click on the Configure tab.
  3. In the Azure AD Tenant section, enter the same Azure AD tenant that you used on the old server.
  4. In the Directory Synchronization section, make sure that the same directory synchronization settings are configured as on the old server.
  5. Click on the Save button.

Migration step: 2

  • Run the following powershell script to export the configuration,
C:\Program Files\Microsoft Azure Active Directory Connect\Tools\MigrateSettings.ps1 -ServerConfiguration "c:\AdConnect"
  • Copy the entire directory to the new staging server or just save it for backup on another server.
  • Install Azure AD connect on a new server.
  • Import the JSON file using “Import Synchronization settings”
1684492780385.png

Attachments

  • 1684492021481.png
    1684492021481.png
    20.5 KB · Views: 0
Last edited:
OP
MJ-Tech

MJ-Tech

Well-Known Member
182
15
18
  • Thread Starter
  • #2
I optedMigration 1and followed the steps below,
  1. 导出现有连接configurati Azure广告on (Server 2012 R2).
  2. Installed the latest version of Azure AD Connect on a new Windows Server 2022.
  3. I imported the Azure AD Connect configuration by importing the JSON file that i exported earlier. Enabled staging mode and performed a sync. No issues were encountered during synchronization.
  4. Kept the old server in staging mode to ensure no changes were made during the migration.
  5. I unchecked the staging mode on the new server and ran a delta sync. No issues were encountered during the synchronization.
Screenshot taken from Admin portal:
1684506572257.png
For testing purposes, I added a new AD account in our on-premise environment and performed a delta sync on the new server. Within a few seconds, a new account appeared in the O365 admin portal. Subsequently, I deleted the account from AD and performed another delta sync, and the account was successfully removed from the O365 admin portal.

Verified if any errors occurred in the health check portal, but no errors were seen,

1684506702924.png

Currently, it is showing two servers in the Sync Services section: the new server with staging unchecked and the existing server with staging enabled,

1684506856412.png

Does it mean everything looks good, or do I need to verify any other things to ensure Azure AD Connect works on the new server?