Active Directory remains the primary identity platform for most global enterprises. Yet identity weaknesses now play a material role in nearly 90 percent of cyber incidents, according to the 2026 Unit 42 Global Incident Response Report, with attacks targeting AD authentication tickets doubling year over year.
That makes the AD migration window – when systems end up extended, credentials are in transit, and two environments share a single attack surface – one of the highest-risk phases in the identity lifecycle. Despite this, most migration tooling has not meaningfully changed in over a decade.
This new version of Semperis Migrator for AD employs Kubernetes and ends up focused around a central premise: Every object you migrate is a trust boundary crossed.
The release introduces:
- Directory Synchronization Sets (DSS) for project-scoped, wave-based execution
- Staging reports that preview every change before it commits
- A Secure Access and Control Agent for in-place endpoint cutover without reimaging
- A unified searchable log surface across all components
- Deployment validation that surfaces infrastructure blockers during setup instead of mid-migration
Identity-system attacks are on the rise and with Microsoft’s phased deprecation enforcement of RC4 encryption in Kerberos in effect since July, organizations are facing a unique exposure risk during migration projects.
Those that are still RC4-dependent could face mid-migration service-account failures, cross-forest authentication breakdowns, and coexistence disruptions, issues that most legacy migration tools never even thought of.
At the same time, M&A-driven identity-integration timelines continue to shrink. Deals typically require value realization within 12–18 months, while full identity integration can traditionally take 18–24 months.
“The risk in migration was never the copy operation. It’s everything the copy operation touches – the service accounts nobody documented, the encryption dependencies nobody audited, the attack paths nobody closed,” said Michael Masciulli, Semperis managing director of migration products and Services. “Migrator for AD makes those risks visible before they become outages. That’s how you come out of a migration stronger, not just moved.”
Click here for more information.