1,500 Users Migrated. Zero Downtime. One Weekend. Nobody Noticed a Thing.

1,500 users. On-prem to Azure hybrid. One weekend. Zero downtime. Nobody noticed. The starting point was a mess. Active Directory held together with prayers and undocumented group policies. No infrastructure as code. Everything manual. And the one person who knew how it all worked had left two months before I joined. Classic. The plan was Terraform for all new Azure infrastructure, PowerShell scripts to automate the AD sync and user migration, and keep on-prem running in parallel so nothing breaks. Simple on paper. Terrifying in practice. Technically, the migration was solvable. What almost killed us: legacy apps nobody documented, security policies written in 2014 that nobody dared update, and teams who feared change more than they feared outages. I had to earn trust before migrating a single user. Friday night: migration starts, PowerShell running, Terraform applying, AD sync cutting over. Then at 3 AM DNS propagation decided to be creative - some endpoints resolving to old servers, some to new. Fixed it. Verified every endpoint one by one. Watched the logs until sunrise. Sunday morning: done. 1,500 users opened their laptops Monday, everything worked, not a single support…