Remove Entra AD

Synopsis: Outlines the steps to properly sever Entra Connect from a domain.

Published July 4th, 2025
Last Modified: July 4th, 2025

Intro: There are some additional steps required to 'neatly' clean up the Entra Connect ( Formerly Azure AD Connect.)

Quick Run Down

1.) Audit Current Environment

2.) Uninstall Application from Server

3.) Use Powershell to turn off directory Sync from the O365 Tenant

4.) Remove Sync Service from Entra

Audit

For a sanity check of successful removal, you can note the ratio of current user objects in Azure AD, and number of current users syncing from on-prem. This can be found easily by filtering the users list by ‘On-premises sync’ :

Uninstall App.

• Log into the Domain Controller you wish to remove AAD sync from.
• Navigate to Add/Remove Programs in the control panel, or open Appwiz.cpl
• Locate ‘Microsoft Azure AD Connect’
• Select Uninstall
• A new screen asks which components to remove. Select all unless you are aware the additional services are needed elsewhere.
• Hit “Remove”
• Wait for the uninstaller to finish.

PowerShell to turn off Directory Sync.

• Download & Install the Microsoft Azure Active Directory Module for Powershell.
• Open Powershell
• Run ‘Connect-MSOLService' | Sign in with the clients 365 creds
• Run ‘Set-MsolDirSyncEnabled -EnableDirSync $false’ | Select Y (Default) to confirm

Remove Service from Entra AD

• Log into 365 Admin, navigate to Entra ID
• Navigate to Entra Connect Health
• Click on "Sync Services" and then click on the Service Name:
• Click on the Domain Controller you've decommissioned and then click "Delete":
• (OPTIONAL) Head back to Entra Connect Health, click on Sync Errors and then click on "Notifications Settings": Click "Off" and then click "Save":

Newest Post