Move Hybrid Joined Devices to Entra Joined

Yes, with a migration tool. Windows has no built-in switch from Microsoft Entra hybrid join (formerly hybrid Azure AD join) to Microsoft Entra join (formerly Azure AD join) that keeps the user’s profile. The standard Microsoft route is to wipe the device and re-enrol it with Windows Autopilot, which gives the user a new profile.

PowerSyncPro Migration Agent removes the device from the AD domain, joins it to Microsoft Entra ID (formerly Azure AD) with a bulk enrolment token and re-permissions the existing profile for the user’s Entra account. Users keep their desktop, files and applications, and Outlook, Teams and OneDrive reconnect.

Check a few dependencies first. Turn off the MFA requirement for joining devices in the target tenant. Review Conditional Access policies that require a hybrid joined device. Decide how users will reach on-premises file shares, for example with Windows Hello for Business Cloud Kerberos trust. Test applications that depend on domain membership.