Azure ADDS Inbound NAT Rule upgrade in Load Balancer

Hi,

getting ahead of that 2027 deprecation is a great idea. but with azure adds, we have to be very careful because Microsoft fully manages those domain controllers for you.

my strong advice is do not delete and recreate those nat rules yourself. the load balancer and its specific rules are a core part of the adds managed service. Microsoft's backend processes likely rely on the specific configuration, names, or metadata of those automatically created rules to function correctly. if you change them, you risk breaking the automated management, including crucial security patching.

the safe and supported path is to let Microsoft handle the upgrade. they are aware of the load balancer rule deprecation timeline. as we get closer to 2027, they will almost certainly release an official process or perform a platform update to migrate all existing adds deployments to the new rule version. your manager's proactive thinking is good, but this is one area where it is better to wait for the vendor's guidance.

what you can do now is monitor the official azure updates. keep an eye on the azure updates page https://azure.microsoft.com/en-us/updates/ and specifically search for adds or load balancer news. when Microsoft announces the migration path, you will be ready to act.

you could also try a test in a development environment. if you have a test adds forest, you could experiment with the rules there and see if management functions break. but even then, there is a risk.

please do not manually change those rules. the potential to disrupt Microsoft's management of your domain controllers is too high. the right move is to wait for an official update from Microsoft on how they will handle this deprecation for their managed services.

good luck, and it is great that you are planning so far ahead.

rgds,

Alex