Seamless Entra ID migrations

PowerSyncPro focuses on migration of Windows Workstations to Azure AD / Entra ID. We can make devices Cloud Native directly from an Entra Registered/Hybrid Join state or migrate Windows Workstations between tenants. These workstations can be physical or virtual or a persistent VDI.

Note: PowerSyncPro does not migrate Virtual Machines between Azure subscriptions, nor Azure App Registration between tenants.

If you are migrating servers, key considerations include:

• Just switching the subscription
• Moving the server between geographies, or
• Need to change the server’s Active Directory join/Entra join state.

PowerSyncPro can assist with join state changes but does not handle subscription or geographic migrations.

These need to be re-created in the target tenant there are currently no migration tools that exist for this. Customers will need to recreate the Enterprise Apps and App Registrations, recreate the secrets and upload any certificates that are being used to secure them. Often you will need to contact the vendor to ensure the translation of the users from the source to the target tenant is maintained.

You should take this opportunity to review and secure your App Registrations. Take this time to ensure they have owners and assignments and that the API permissions granted are not overly privileged for the Apps intended use.

Entra AD (Azure) is large and complicated, and you will need to also consider:

• Access control (IAM): Roles, Role assignments
• Storage Accounts
• SQL Databases
• Application Gateways
• Networking: Firewalls, Load Balancers, Virtual Network Gateways, VPNs
• Site Recovery and Backup Services
• Web Apps
• Bastion
• Conditional Access