AZURE CLOUD ENGINEERING

AAD sync of non-routable domains

Note: Short steps for a skilled person

• 1. Add UPN Suffix ‘domain.org’ in the Active Directory Domains and Trusts console
• 2. Change the UPN suffix for users to be test migrated. In user properties in local Active Directory console, change the selection the from your local domain to the ‘domain.org’ domain.
• 3. Configure the AD connect tool to sync only the required users (Synchronization Filters).
• 4. Now, you should be able to see the users in Azure AD als0

You may use the following cmdlet in on premises to change the upn suffix of entire users once the preliminary tests are over and ready for bulk migration

$LocalUsers = Get-ADUser -Filter {UserPrincipalName -like ‘*mycompany.local’} -Properties userPrincipalName -ResultSetSize $null

$LocalUsers | foreach {$newUpn = $_.UserPrincipalName.Replace(“mycompany.local”,”mycompany.onmicrosoft.com”); $_ | Set-ADUser -UserPrincipalName $newUpn}