Windows 10: Active Directory Migration user impact

Good day, I am trying to understand what could go wrong on the day of migration so I can communicate this to my stakeholders as a worst case scenario. Basically, how could a user be impacted after migration. For example, user cannot login, their email doesn't work, an application does not work... any further input from the forum would be greatly appreciated. Thank you.

:)

 

Current active users that are friends

The other reason I suggested this is that users can add characters to their username that are not alphanumeric (e.g. user*). This confuses things somewhat when looking at the list.

 

Mailbox migrations and Azure / Active Directory

Quick question or observation, we are in the middle of performing office mailbox migrations to the cloud. During this time I have noticed Active Directory accounts randomly locking out. Whether it be after a reboot, outlook, skype all of the sudden prompting
for passwords. Not sure if there is a correlation between Azure / Active Directory.

Or it could all be just a coincidence.

Thank you

 

ADFS in Active Directory Migration scenario

Hi All,

Thanks in advance. I am looking for inputs and suggestions on below scenario..has anyone come across this type of scenario?

Scenario:

Company adatum.com is in process of revamping is infra and have decided to upgrade its AD and ADFS infra. Due to some business constraints they do not want to in-place upgrade and want to perform a migration approach. However they want to retain the
original domain name as adatum.com



[table][tr][td]Internal Domain Name [/td][td]External Domain Name [/td][td]ADFS Farm name [/td][td]Public Domain is registered on Internet [/td][td]State [/td][/tr][tr][td]adatum.local [/td][td]adatum.com [/td][td]fs.adatum.com [/td][td]Yes [/td][td]Original [/td][/tr][tr][td]Fabrikam.local [/td][td]Fabrikam.com [/td][td]sts.fabrikam.com [/td][td]Yes [/td][td]During Migration [/td][/tr][tr][td]Fabrikam.local [/td][td]adatum.comFabrikam.com [/td][td]sts.fabrikam.com [/td][td]Yes [/td][td]After Migration [/td][/tr][/table]

1. Created a new domain for adatum.com as Fabrikam.local (fabrikam.com) where all objects will be migrated.
2. fs.adatum.com ADFS Farm is integrated with O365 , on-premises and other cloud applications are added as relay party.
3. sts.fabrikam.com ADFS Farm will be integrated with new O365 Tenant.
4. Initially fabrikam.com will be added, verified with new O365 Tenant and federated ADFS farm (sts.fabrikam.com ).
   
5. Users will be able to access resources with L:
   *** Email address is removed for privacy ***.
6. As one domain can be federated with only one tenant, federation will be removed from adatum.com for adatum.com.
7. Once migration is over adatum.com will be added, verified and federated with ADFS farm (sts.fabrikam.com) .

ADFS farm (sts.adatum.com) will support multiple Domain and UPN’s (L: *** Email address is removed for privacy *** and
L: *** Email address is removed for privacy ***) and will be configured with “SupportMultipleDomain” switch.



Both adatum.com and fabrikam.com will be added to the same new O365 Tenant. After migration of users and applications has been completed will remove fabrikam.com from O365.



Question 1: Can I add adatum.com as federated relay party to fabrikam and vice-versa and access on-premise and other application from adatum.com from fabrikam.com using
L: *** Email address is removed for privacy ***?



Question2 : Another question on same lines till we have not federated adatum.com in our new O365 tenant. Can my users from fabrikam.com can access resources of adatum.com even when users are in disabled in adatum.local (adatum.com)?



Question3: My intention is to add adatum.com to new tenant is when all users and applications have been migrated to new infra? So can I have co-exsitence approach where users from fabrikam can access resources just like they used to access in adatum.com.
In this scenario my Identity store is fabrikam.local.



Question 4: Will there be any impact on O365 services if I change my mx records and other records to point to adatum.com?

Thanks & Regards