In this video, we demonstrate how to perform a seamless Active Directory to Active Directory (AD to AD) workstation migration leveraging Microsoft's Cloud Kerberos Trust feature.

By utilising Cloud Kerberos Trust alongside cloud sync for user identities, you can bypass the need for traditional Microsoft Entra Connect Sync. This removes the typical sync lag, allowing the migrated device to achieve a hybrid-joined status almost instantly into the target environment.

What you'll see in this demo: Pre-migration check: A look at the source environment where the user account and workstation are active but not yet hybrid-joined [00:53].

Initiating the migration: Running the PowerSyncPro runbook to quickly transfer the device straight to the target domain, bypassing long wait times [01:38].

Behind the scenes: A glance at the target Domain Controller and the Cloud Kerberos Trust prerequisite environment setup (Windows Server 2025) [02:18].

Device re-permissioning: How PowerSyncPro maps the source security identifiers (SIDs) to the target SIDs across the registry and file system to retain a seamless user profile [03:53].

Verification: Logging into the target AD account and using dsregcmd /status to confirm that the machine has successfully achieved an Azure AD / Hybrid Joined status right away [06:12].

Achieving an accelerated hybrid join status allows your organisation to roll out compliance policies and conditional access configurations much faster, ensuring secure and immediate access to Microsoft 365 tenant workloads.