Domain Join to Cloud Only (AADJ) Migration without Wipe and Load!!

as a Microsoft MVP it's really important to me that I bring relevant and useful content to the community I do that already via Twitter LinkedIn and this channel now I know many of you watching this know pretty well how to keep on top of the latest news and releases for me I just wait for Andrew Taylor's Weekly Newsletter he serves up all the new and interesting InTune content for me and hundreds of others on a weekly basis with that in mind I actually want to go through one of the articles on Andrew's list the links for all of this are in the description below this is a Blog from Sean Bulger he is an awesome Community Creator and contributor Sean has put together a detailed article covering a set of tools that make up one possible method for migrating from domain join to Azure adjoined without a wipe and load now as you may know wipe and load is the only supported and recommended method for migrating a machine from domain join to Azure ID joined for almost all cases you should just do that just wipe and load the device in some cases and in some organizations that's just not possible you need to get over to Azure 80 joined without wiping the user's machine Sean's blog covers exactly how to do this step by step I followed those steps and well let's take a look at the experience scroll all the way down to the bottom and you get this section which really covers exactly how to install this step by step also it has one really important line which is that you need to determine your delivery method and update this script so when we talk about the delivery method we need to get the scripts and these files onto the machine somehow that could be group policy it could be manually it could be in tune or config manager you need to get them on there somehow Sean doesn't tell you how to do that right and so I'm not going to tell you how to do that you can figure out your own way or you could reach out to other community members or myself to get help on figuring out how to do that for this I'm just going to cover the user experience so to cheat a little bit I'm going to put the files on the user machine and run them as admin obviously if you use a tool to do that then the user wouldn't need to take any action and wouldn't see the command prompt and stuff that I'm going to have to show you when I run this tool but let's jump into it so here are the files we've got prepare migration dot PS1 and aadmigration.zip we just need to run prepare migration.ps1 so we're going to open up terminal and just run that Command right there now I've sped this bit up a little bit just so we can see it all happen maybe not in real time but I want to show you everything that happens for the user experience once it finished the initial part it starts setting up OneDrive for the user because that's how it gets the user data somewhere safe because it's going to need to give this user a new profile so we need to get that data off onto OneDrive and so it sets it up for us now the data is on OneDrive and synchronized to OneDrive I'm going to give this machine a reboot that's where the next step kicks in so manually rebooting this machine the machine won't reboot automatically during this initial setup because we don't want the user to be taken by surprise in order to kick this off you do need to do a manual reboot or manual sign out and sign back in so with the user signing back in after approximately 30 seconds to a minute Powershell application deployment toolkit will kick in and start that migration process for the user as you can see there we've got 10 minute countdown with which to choose between defer and continue you can set your own deferral up in the Powershell app deployment toolkit after that Powershell app deployment toolkit loads and starts installing this application automatically reboot for the user and the next step is that a user called migration in progress signs in automatically using Auto login and this means that the user gets to see this screen migration in progress it'll reboot a couple more times and get back to this screen once it finished the migration once it's off the domain and on Azure ID you get this incredible message for the user migration completed this PC has been migrated to Azure active directory please log into Windows using your email address and password and Sean did an incredible job to create this it's actually using the legal notice so built-in feature for Windows all you have to do is choose OK and they can get ready to sign in so now just tapping in the username and the password Here and because I've set this up with my tenant the user has to set up Windows hello for business so we'll quickly do that type in a pin I'm using a virtual machine so there's no other ways to to authenticate with passwordless right now once that's done the user's right at the desktop and ready to go wait for this stuff to load and then we'll just jump into the settings page and take a look at what we get from the work and school account just jump down to account you can see it's already renamed the device there for me which is great access work or school and you can see that we're connected to the Azure ID domain not the on-premises domain and InTune is working and is synced successfully so that's awesome next just jump straight into Powershell and type DS Reg status and just check the status of this device from a joined perspective and we are Azure already joined and not domain join so that's awesome so this machine has now been migrated from domain joined to Azure adjoined it happened to be a hybrid during device but I understand that it will work if you're not even hybrid joined so take a look at Andrew Taylor's newsletter sign up to Andrew Taylor's newsletter it's an awesome newsletter to follow every week also take a look at Sean's blog because that tool has blown me away see you next time [Music] thank you

Channel: CloudManagement.Community

Views: 16,098

Keywords:

Id: ByKFxF7PlPQ

Length: 6min 23sec (383 seconds)

Published: Fri Nov 11 2022