New Azure Active directory connect versions don’t support Windows server 2012 R2 anymore. Let’s see how to safely move the Azure AD Connect to a new operating system. There might be various scenarios on why you need to move to a new operating system. We will be seeing how to bring a staging server in the same configuration and move the configuration from the old server to the new server. They have simplified the process in the new version of Azure Active Directory Connect.
We will be migrating from Windows Server 2012 R2 to Windows Server 2019 in the scenario. Configured with standard operating system settings like the old azure AD Connect server with a new IP Address.
- Export the Configuration of the existing Azure AD Connect server
- Install the new Azure AD Connect server with the imported settings (Staging Mode)
- Verify Staging Sync
- Set the Old Azure AD Connect server to staging mode (Optional)
- Uninstall Old Azure AD Connect server (Direct uninstall)
Login to the old Azure AD Connect server to export the current configuration. Note that this option is available in only the latest azure Active directory to connect versions you may not see it if you are running an older version.
Choose export settings to save the JSON file.
if you don’t see the option to Export the Current configuration. You may run an old version of Azure ad connect.
you can copy the latest applied JSON policy file from C:\ProgramData\AADConnect
Sample File will look like – Applied-SynchronizationPolicy-20210810-173952.json
Login to the new server which has the latest operating system. Download the latest Azure AD Connect version
Choose Customize. if you see an error to enable TLS1.2.
Choose Import synchronization settings. it’s not a preview anymore it’s a bug showing as a preview.
Choose password hash synchronization
Log in using your global administrator or hybrid administrator credentials
Choose the Enterprise admins credentials to create a service account
Make sure directory is configured
Staging Mode is Checked on New server and Choose install
Configuration is completed in staging mode in the new server.
Log off and log in so that permissions get applied to open the synchronization manager
Now you have two options to Put the old server into staging mode and direct uninstall it.
Logged into the new server.
Configure Staging mode in the old server
Enable the staging mode in the old server.
Staging mode is successfully enabled.
Now get inside the new server and disable the staging mode. To bring the new server live.
You can keep track of the Directory sync status in Office 365 admin Center to check which server is syncing
In my case am moving from the Directory Sync Client version 1.5.30 to 188.8.131.52 for example
Now Staging mode is successfully disabled.
Now you can see the new server has taken over with the same settings.
Login to the old server add or remove programs – To initiate a complete uninstall.
Uninstall is completed.
Remove the old MSOL Account that belongs to the old server.
you can delete the Old MSOL Account
Additional Sync admins can be added using the below group