A few things to do first. Make sure you can login with the godaddy admin account to Portal.Azure.com
And change the password for the “admin@net…..” account. This will be your new admin account to login into MS365
1. PowerShell Execution Policy:
Problem: By default, PowerShell often blocks running scripts.
Check: Run Get-ExecutionPolicy in PowerShell.
Solution: If it shows “Restricted,” run Set-ExecutionPolicy Bypass -Scope Process.
This temporarily allows scripts to run in the current PowerShell session.
2. Install Microsoft Graph Module:
Run: Install-Module Microsoft.Graph -Scope CurrentUser -Repository PSGallery -Force in PowerShell (as administrator).
Wait: This may take time. Wait until it returns to the system prompt.
3. Run the De-federation Script:
Run the provided script from the blog post.
https://docs.tminus365.com/configurations/godaddy/defederating-godaddy-365
Here is the primary Script to run
Write-Host “Checking for MSGraph module…”
$Module = Get-Module -Name “Microsoft.Graph.Identity.DirectoryManagement” -ListAvailable
if ($Module -eq $null) {
Write-Host “MSGraph module not found, installing MSGraph”
Install-Module -name Microsoft.Graph.Identity.DirectoryManagement
}
Connect-MgGraph -Scopes “Directory.Read.All”,”Domain.Read.All”,”Domain.ReadWrite.All”,”Directory.AccessAsUser.All”
#Enter the Admin credentials from “Become a tenant Admin in GoDaddy”
Get-MgDomain
#See that the domain is “federated”#
Update-MgDomain -DomainId “<InsertFederatedDomain>” -Authentication Managed
Prompts:
You might be asked about allowing network paths and untrusted modules.
Answer “Yes” or “Yes to All” to these prompts.
You will be asked to enter your godaddy admin credentials.
Action: The script will change the domain from “federated” to “managed.”
Note – Don’t close Powershell yet!
4. Post-Script Actions:
Log in to the Microsoft 365 admin center.
Remove GoDaddy from the partner list.
Reset all the logins for the users.
Remove Global Admin from any account not freshly created during this process.
Assign proper licenses for users- often they’ll come over with only exchange online licenses.
When all is done. Run Disconnect-MgGraph in powershell. This will disconnect from the domain so the computer can do a different migration without issues.
