Re-Synchronization with Azure

Question

I currently have an Active Directory server that is synchronized with Azure AD. I need to switch to a new Active Directory server and migrate all users from the old server to the new one. Afterward, I plan to re-establish synchronization with Azure AD on the new server. However, I'm concerned that the new synchronization might cause conflicts since the users on the new server will likely have different ObjectGUIDs.

Can you recommend any tools for migrating users or suggest an alternative approach?

Will there be any issues when re-synchronizing from a new server?

Answer 1

Assuming that you're referring to an AD forest migration, then use the following approach:

• prior to the migration, set the value of the ms-DS-ConsistencyGuid attribute of every security principal you intend to migrate to the value of the objectGuid attribute
• migrate
• re-establish Entra Connect but set the source anchor attribute to ms-DS-ConsistencyGuid

More at https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/plan-connect-design-concepts#using-ms-ds-consistencyguid-as-sourceanchor

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin