The best Microsoft 365 tips on the web

Remove Azure AD Connect and make all AD objects cloud managed

In a hybrid environment, many administrators find it difficult to manage users and e-mail objects on-premises. Permissions in the Cloud. Members of groups in both places....

Want to solve this and manage full management of all user objects, distribution groups, mailboxes contacts in the cloud?

What are the benefits of Azure AD managed objects?

  • Easy management in Microsoft 365.
  • Groups have managers and can be easily managed by third parties.
  • The Cloud Shift to the cloud is clear. No more confusion.
  • Self-Service and MFA is easier to implement.
  • No dependencies in the local infrastructure.
  • Modern infrastructure armed for cybersecurity risks.
  • Agile and dynamic environment not tied to the systems within the corporate environment.

Disadvantages of a hybrid cut-through?

  • Users exist "twice. You have a use on-premises and online with identically the same username.
  • On-premise AD gets new users.
  • Passwords are no longer synced from your on-premises AD.
  • Self-Service with password write-back and other features you use from the cloud to On-Premise disappear instantaneously.


If you opt for full-cloud, it is recommended to migrate more services to Microsoft 365 & Azure so that the dependency on your own systems will decrease. Therefore, it is best to implement this scenario only when you have decided to phase out your Active Directory and other applications and continue in the Cloud.

How do you make all AD objects cloud-only?


'Install-Module MSOnline'

This user is syncted for now. (see on the right side)


Enter your username & password.

You are now connected to the MsolService

Set-MsolDirSyncEnabled -EnableDirsync $False

It may take up to 72 hours before you will see the status on your users. This depends on the number of users. Learn more: Microsoft Docs

Sync has stopped

You can now azure Ad remove connect.

If you do not continue with Azure AD Connect then uninstall this software as well.

If you do want to go far and back with sync run through the Azure AD Connect Wizard.

Also read

Install Windows 10 + bring device into modern management with Intune
Add devices in Endpoint Manager - Azure AD or Hybrid Join
How to install Azure AD preview module with PowerShell?
Making your organization more secure in one click with Azure AD Security Defaults

Tagged: , , , , , , , , ,
0 0 vote
Article review
Please let us know if there are

Latest Most Voted
Inline feedbacks
See all comments
3 years ago


In a case where there are multiple forests synced to the same tenant how do you go about removing one forest and keep the cloud objects?

2 years ago

Great article Jasper. Thanks a lot for a valuable piece in the AD world. I am struggling to understand what will happen post SYNC STOP from onprem AD to AAD. Basically, when all the on prem Security groups are Synced thru ADConnect to AAD be it mail enabled or just security groups, and then when one decides to stop the sync for these groups, what happens? How do i remediates User access and make sure that the users are not getting affected due to the stopping of the SYNC ?

I would really appreciate if you can enlighten on this question.

2 years ago

Great article, thank you a bunch!

What happens with all the local AD joined computers? I have for example a domain user with a domain joined PC (and the user is local admin on the PC), that I migrate to cloud only.
As I understand, after the migration, the user will be cloud only and the domain<->cloud sync will be gone, but the computer (and the local domain user) is still connected to the local AD.
Will I need to reinstall the PCs?

2 years ago
Response to  Jasper

Thanks for the swift reply.
I think I'll have to do some tests to see how everything turns out, before I start the actual migration. The organization I'm going to migrate isn't that large, so to keep things simple, I think I'll end up going with the user migration only and then reinstall the PC's one at a time.
I'll keep you posted 🙂

Would love to know your thoughts, please leave a comment.x