I need a quick sanity check before we commit to our plan of decommissioning our local hybrid domain and moving to full cloud management with Entra ID.

I’ve researched the migration steps using Copilot and Google AI, but the results vary depending on the day. Ultimately, our goal is to make Entra ID our true source of identity authority and eventually power down and decommission the local domain controllers. But my main goal as of right now is transferring identity authority to Entra.

Here is our current infrastructure and environment setup:

• Servers & OS: We have 3 Domain Controllers (2 virtual, 1 physical), 1 File/Print server, 1 Exchange server, and 1 Microsoft Entra Connect (AAD Connect) server. All underlying servers run Windows Server 2012 R2.
• Exchange: Running Exchange 2013. All email routing flows through M365. Distribution lists and groups have already been migrated to M365, but Exchange and local AD still manage local identity properties and mailboxes.
• Sync Configuration: We currently have a one-way synchronization set up to Entra ID. Password writeback is not enabled.
• Endpoints: All user computers are off the local domain and fully enrolled in Intune cloud management. We are not utilizing any hybrid join configurations.
• Applications: No local applications are integrated with or dependent on Active Directory.
• File Server: All users have transitioned to OneDrive and SharePoint.
• Network Services: DHCP and DNS will remain on the local DCs for the immediate future, with plans to migrate these services to a new UniFi firewall down the road.
• Printing: All printers have been successfully decommissioned from the print server and redeployed via Intune using Win32 MSI app packages.

I am SO confused on what steps we do first as Copilot says one thing and then Google AI says another.

Do we turn off Exchange attributes and then turn off directory sync with Entra?

Can anyone provide any advice here?

Thank you in advance for your assistance!