Azure Migrate: The Moving Company and Survey Team for Your Move to the Cloud
An intermediate, plain-English guide to Azure Migrate — how it discovers what you own, assesses what it would cost and whether it will work in Azure, plans the move in sensible waves, copies servers and data across with little downtime, and helps you tidy up and save money afterwards.
Imagine you are moving a large family business from an old building in the city to a modern campus on the other side of the country. You would not simply hire a truck and start loading. First someone walks through every room and writes down what is there. Then a surveyor checks which items will fit through the new doors and which should be replaced. A planner decides who moves first and who moves last, a moving crew packs and transports everything, and afterwards someone makes sure every desk, phone and filing cabinet works in its new home. Azure Migrate plays all of those roles, but for servers, databases, web applications and data moving into Azure.
In this guide we will go step by step through what the service is, how its parts fit together, how discovery and assessment work, how a server travels from your data centre to Azure, and how to plan, secure, monitor and pay for the whole journey. We will also look at the newer capabilities that matter for large programmes, such as business cases, application awareness and wave planning, and we will be careful to point out where details change quickly and should be checked against the official documentation.
1What Azure Migrate Is and Why It Exists
Moving to the cloud is a project, not a button.
Many organisations own hundreds or thousands of servers, built up over many years by many different teams. Some run important business applications, some run forgotten test systems, and some nobody can explain. Moving all of this to the cloud raises hard questions. What do we actually have? Which servers depend on which? How large should each cloud machine be? What will it cost? In what order should things move? How do we copy a live server without switching off the business?
Azure Migrate is the central hub in Azure for answering these questions. It brings together tools to discover your existing environment, assess its readiness and cost for Azure, build a business case that compares staying put with moving, and migrate servers, databases, web applications and data. It supports workloads running on VMware, Hyper-V, physical servers and even virtual machines in other public clouds.
The hub idea matters. Instead of using a different product for each stage, you create a single project in Azure and use it to track the whole journey. Everything discovered, every assessment and every migration lives in one place, so teams can see progress and share results.
Think of a relocation company that offers a complete service. One team surveys your old premises, another prices the move, another packs the boxes and another unpacks at the new site. You work with one company and one plan, not with five unconnected contractors.
Migration versus modernisation
Moving a server as-is is often called lift and shift. It is the fastest route, because nothing about the application changes. But the cloud also offers managed services that remove a lot of operational work. Moving a database to a managed database service, or a website to a managed web hosting service, is called modernising. Azure Migrate helps with both, and its assessments can compare the options so you can choose what suits each workload.
2The Big Picture: The Migration Journey
Every successful migration follows the same arc, whatever the tools.
Cloud migrations that go well share a shape. They begin with understanding and end with improvement, and the move itself is only one stage in the middle. Azure Migrate is organised around this arc.
flowchart LR
A["Discover: inventory servers, apps and dependencies"] --> B["Assess: readiness, sizing and cost"]
B --> C["Business case: compare staying versus moving"]
C --> D["Plan: landing zone and migration waves"]
D --> E["Migrate: replicate, test and cut over"]
E --> F["Optimise: right-size, secure and monitor"]
F --> G["Decommission old systems"]
The strategy choices for each workload
Not every workload deserves the same treatment. A common way to think about it is a short list of strategies, sometimes called the “R” options. Choosing one per workload is a core planning task.
Rehost
Move the server as it is onto an Azure virtual machine. Fast and low risk, with few changes.
Replatform
Move the workload and swap one part for a managed service, such as a database for a managed database, without redesigning the application.
Refactor or rearchitect
Change the application to use cloud-native designs such as containers or serverless. Highest effort, highest long-term benefit.
Rebuild or replace
Retire the old application and adopt a software-as-a-service product or write it again.
Retire
Switch off what nobody uses. Discovery often reveals servers that can simply be decommissioned.
Retain
Leave a workload where it is for now, perhaps for regulatory or technical reasons, and revisit later.
Moving house offers the same choices. You can carry the old sofa to the new home as-is, swap the old oven for a built-in one, redesign the whole kitchen, buy ready-made furniture, or donate things you no longer use. Different items deserve different decisions.
The tool does not choose your strategy for you. It provides data, such as readiness and cost, that informs the decision. Business context, such as application importance, deadlines and skills, still comes from people.
3Core Concepts You Must Know
A small vocabulary unlocks every screen and every planning meeting.
Migration has its own jargon, and Azure Migrate adds some product-specific terms. Learn the following and the documentation becomes much easier to read.
Azure Migrate project
The container in Azure that holds your discovered inventory, assessments, business cases and migration tracking.
Appliance
A lightweight virtual machine you deploy on premises that discovers servers and sends the data to your project, and can also assist agentless migration.
Discovery
Collecting configuration and performance data about servers, databases and applications.
Assessment
An analysis of discovered workloads for readiness, recommended Azure size and estimated monthly cost.
Business case
A financial and strategic comparison of the on-premises estate against Azure over several years.
Dependency analysis
Mapping which servers talk to which, so that tightly connected systems move together.
Right-sizing
Choosing an Azure machine size that matches what the workload really uses, not what the old server was bought with.
Replication
Continuously copying a server’s disks to Azure while the original keeps running.
Test migration
Starting a copy of the replicated server in an isolated network to prove it works, without affecting the original.
Cutover
The final step where the on-premises server is switched off, a last sync is done and the Azure copy becomes the live system.
Landing zone
The prepared Azure environment with networking, identity, security and governance that receives the migrated workloads.
Wave
A group of workloads that are migrated together in one planned period.
Replication is like photocopying a filing cabinet page by page while people keep using the original, adding new pages as they appear. Cutover is the moment the office closes for an hour, the last pages are copied, and everybody starts using the copy.
People often assume an assessment moves something. It does not. Discovery and assessment only read and calculate. Nothing is copied to Azure until you start replication, and nothing goes live until you perform a cutover.
4Architecture and Components
What you deploy, what Azure runs and how they talk.
Azure Migrate has parts in the cloud and parts in your own environment. Understanding who runs what clarifies firewall requirements, permissions and troubleshooting.
| Component | Responsibility | Who operates it |
|---|---|---|
| Azure Migrate project | Stores inventory, assessments, business cases and migration state, in a chosen geography | Azure, configured by you |
| Discovery and assessment tool | Collects data and produces readiness, sizing and cost results | Azure |
| Migration and modernization tool | Replicates servers and orchestrates test migrations and cutovers | Azure |
| Azure Migrate appliance | On-premises collector and, for VMware, helper for agentless replication | You deploy and maintain |
| Replication appliance and agents | For agent-based scenarios, such as physical servers and other clouds | You deploy and maintain |
| Storage and key vault in your subscription | Hold replicated data and credentials used by the process | Created for you, owned by you |
| Companion tools | Database migration, web app migration, data transfer and other services | Azure |
The appliance in the middle
The appliance is the most visible component. It is a small virtual machine, downloaded from your project and deployed in your environment. It connects to your virtualisation platform with a read-only account, gathers configuration and performance data and sends it over a secure outbound connection to the project. It does not receive inbound connections from Azure, which keeps firewall rules simple.
flowchart LR
subgraph OnPrem["Your environment"]
H["Hypervisor or physical servers"]
AP["Azure Migrate appliance"]
end
H -->|"Read-only inventory and performance data"| AP
AP -->|"Outbound HTTPS"| P["Azure Migrate project"]
P --> A["Assessments and business case"]
P --> M["Migration tool"]
AP -.->|"Replication data for agentless VMware"| S["Azure storage in your subscription"]
S --> V["Azure virtual machines"]
A project stores its metadata in the geography you choose when creating it. Pick one that matches your data residency rules. You can still migrate workloads to any supported Azure region, but the discovery metadata stays in the project’s geography.
5Internal Working: How a Server Travels to Azure
Follow one virtual machine from your data centre to a running Azure copy.
The most common scenario is moving a VMware virtual machine using the agentless method, because it requires no software installed inside the server itself. The following sequence shows what happens.
sequenceDiagram
participant VM as Source virtual machine
participant App as Azure Migrate appliance
participant Store as Azure storage
participant Tool as Migration tool
participant AzVM as Azure virtual machine
App->>VM: Take snapshot and read disks
App->>Store: Send initial copy of disks
loop Until cutover
App->>VM: Read changed blocks since last cycle
App->>Store: Send only the changes
end
Tool->>AzVM: Test migration in isolated network
AzVM-->>Tool: Validation result
Tool->>VM: Planned cutover: shut down source
App->>Store: Send final changes
Tool->>AzVM: Create live Azure virtual machine from replicated disks
Replication is enabled
You select servers, choose the target subscription, network and machine size, and start replication. Nothing changes for users of the source server.
The initial copy runs
The full contents of the disks are copied to storage in your Azure subscription. This is the slowest stage and depends on the amount of data and the available network bandwidth.
Delta replication keeps the copy fresh
After the first copy, only changed data is sent at regular intervals, so the Azure copy stays close behind the live system.
A test migration proves the result
An Azure virtual machine is started from the replicated data in an isolated network. Teams check that the application starts and behaves correctly, then clean up the test.
The cutover is performed in an agreed window
The source can be shut down to avoid losing changes, a final sync is done and the Azure virtual machine is created for real use.
Validation and stop replication
Teams verify the live service, redirect users, and once satisfied stop replication and eventually retire the old server.
Run test migrations early and often. They are cheap, safe and reveal problems such as missing network routes, licensing prompts or drivers long before the real cutover window.
6Discovery: Finding Out What You Really Have
Spreadsheets of servers are almost always wrong.
Most organisations maintain an inventory of servers somewhere, and nearly all of those inventories are out of date. Machines get added and forgotten, ownership changes and nobody records how systems depend on each other. Automatic discovery replaces guesswork with data.
Three ways to feed the project
Appliance-based discovery
The appliance connects to VMware vCenter, Hyper-V hosts or physical and other servers and collects configuration and performance data. It is the most complete method and the one that supports agentless dependency analysis and software inventory where permitted.
Arc-based discovery
If your servers are already connected to Azure through Azure Arc, Azure Migrate can use that existing connection to discover them without a new on-premises appliance. This capability has been described as a preview feature, so check its current status and limitations before relying on it.
Import from files
You can upload inventory from a spreadsheet file or from an export of a popular virtualisation reporting tool. It is quick and needs no deployment, and it is handy for early estimates, but it lacks live performance data and dependency detail.
What gets collected
Configuration data
Operating system, processor count, memory, disks and network adapters of each server.
Utilisation data
Processor, memory, disk and network usage sampled over time, which drives right-sizing.
Installed software and roles
Applications, databases and web servers running on each machine, when software inventory is enabled.
Dependencies
Connections between servers, shown as maps, so that groups that talk to each other can be planned together.
Discovery is like moving house with a camera crew walking through every room, opening cupboards and noting what is inside and how often each item is used. A printed list of what you think you own is no match for that.
Performance data gathered over a single quiet afternoon will under-size servers that spike at month end. Collect performance history over a period that includes your busiest times, and choose assessment settings that reflect real peaks.
Discovery uses read-only accounts, and deeper features such as software inventory and dependency analysis need extra credentials for the servers themselves. Prepare these accounts early, because waiting for access approvals is a common cause of delay.
7Assessment: Readiness, Sizing and Cost
The assessment answers: will it work, how big should it be and what will it cost?
Once discovery has data, assessments turn it into decisions. You create an assessment by choosing a group of servers, a target type and a set of assumptions, and the tool calculates results for each server.
Types of assessment
| Target | Question answered |
|---|---|
| Azure virtual machines | Can this server run as a virtual machine in Azure, what size and what monthly cost? |
| Azure SQL targets | Can this SQL Server move to a managed SQL service, and which option is the best fit? |
| Azure App Service | Can this web application move to a managed web hosting service? |
| Azure VMware Solution | Can this VMware workload move to a dedicated VMware environment in Azure with minimal change? |
| Other targets | Additional application targets, such as containers for supported application types, are added over time |
What the results tell you
Readiness
Each server is marked as ready, ready with conditions or not ready, with reasons such as an unsupported operating system version or a disk too large for the chosen option.
Recommended size
A suggested Azure machine size and disk type. With performance-based sizing, this reflects actual usage plus a comfort buffer. With as-is sizing, it mirrors the current server’s configuration.
Estimated cost
Monthly compute and storage estimates, which can include savings from pricing commitments and licence benefits.
Confidence rating
A score showing how much performance data was available. More data means more trustworthy sizing.
Settings that change the answer
Performance-based or as-is
Performance-based sizing usually gives smaller and cheaper recommendations by using real utilisation. As-is carries over old over-provisioning.
Comfort factor
A multiplier that adds headroom to observed peaks, for safety against seasonal spikes.
Utilisation percentile
Choosing a high percentile avoids sizing for rare extreme spikes while still covering normal peaks.
Pricing assumptions
Reserved instances, savings plans, licence benefits and region all change the estimated cost.
Sizing from performance data is like choosing a removal van based on what you actually own, not on the size of your old house. A comfort factor is the extra room you leave in the van in case you bought a few things recently.
Assessment costs are estimates based on list assumptions, not quotes. Real bills depend on actual usage, discounts, data transfer and services you add. Treat results as a planning guide and refine them as the migration proceeds.
8Business Case, Reports and Application Awareness
Executives approve money, not appliances.
Technical teams can produce excellent assessments, yet a large migration still needs budget and approval from people who ask different questions. Is moving worth it? How much will we save? What happens to cash flow over several years? Azure Migrate’s business case capability is designed to answer these.
What a business case compares
Costs and savings it can model
- On-premises costs such as hardware refresh, power, facilities and staff effort
- Azure compute, storage and network estimates
- Licence benefits for existing Windows Server and SQL Server licences
- Savings from commitments such as reserved instances and savings plans
- Year-by-year cash flow across the migration period
Limits to remember
- Results depend on assumptions you set and data you have discovered
- Soft benefits such as agility are harder to quantify
- Costs of application change and training are outside the tool’s view
Newer capabilities for planning at scale
Recent updates have focused on making large programmes easier to plan. Microsoft’s release notes describe features such as application-aware discovery that groups servers by roles and naming patterns into likely applications, planning of migration waves using discovery and assessment data, and reports that give executive-level summaries, security insights and business case insights. Several of these have appeared first as previews, so confirm which are generally available before building a plan around them.
Application-aware planning
Instead of thinking in individual servers, teams look at applications and the servers that make them up, which matches how the business thinks.
Wave planning
Applications are distributed into waves using readiness, dependencies and business priorities, giving a realistic schedule.
Executive reporting
Summaries designed for decision makers condense thousands of data points into a few pages of conclusions and risks.
A business case is like the presentation you make to the board about moving the company headquarters. They do not want the list of every desk and chair. They want to know the total cost, the savings, the timeline and the risks.
A quick business case from imported inventory can start the conversation within days. Refine it later with appliance data once the programme is approved and moving.
9Planning: Landing Zones and Migration Waves
A migration is only as smooth as the destination you prepared.
Moving a server to a poorly prepared Azure environment is like moving furniture into a house with no electricity. Before the first migration, you need a destination with the right foundations.
The landing zone
A landing zone is an Azure environment prepared to receive workloads. It includes network design with connectivity back to on-premises, identity and access arrangements, security controls, governance rules, monitoring and a sensible structure of subscriptions. Building it first means each migrated server arrives into a safe, consistent environment rather than a hurried improvisation.
Networking
Virtual networks, address ranges that do not clash with on-premises, connectivity through a private link or VPN, and name resolution.
Identity and access
Who may create, change and operate migrated resources, aligned with your directory and role design.
Governance
Naming, tagging, allowed regions and policies, so migrated resources follow the same rules as new ones.
Security and monitoring
Central logging, threat protection, backup and update management ready from day one.
Planning waves
A wave is a batch of workloads migrated together. Good waves are built from applications, not random servers, so that things that depend on each other move at the same time. Early waves are usually simple, low-risk workloads that let the team learn and build confidence. Complex and business-critical systems come later, when the process is proven.
flowchart TD
A["Inventory and dependency maps"] --> B["Group servers into applications"]
B --> C{"Strategy per application"}
C -->|"Retire"| R["Decommission"]
C -->|"Retain"| T["Leave on premises for now"]
C -->|"Rehost or replatform"| W["Place in a wave"]
W --> W1["Wave 1: simple and low risk"]
W --> W2["Wave 2: moderate complexity"]
W --> W3["Wave 3: critical and complex"]
W1 --> L["Learn and refine the process"]
L --> W2
W2 --> W3
Splitting an application across waves. If the web tier moves in one wave and its database in a later one, traffic crosses between Azure and on-premises, adding delay and cost and sometimes breaking the application. Use dependency data to keep related servers together.
10Server Migration in Depth
Different sources need different methods, but the stages are the same.
The Migration and modernization tool handles server replication and cutover. The method depends on where your servers run today.
| Source | Method | Notes |
|---|---|---|
| VMware virtual machines | Agentless, using the appliance, or agent-based | Agentless is usually simplest since nothing is installed inside the servers; agent-based suits cases the agentless method cannot handle |
| Hyper-V virtual machines | Provider installed on hosts | Replication is coordinated from the host, without agents inside each guest |
| Physical servers | Agent-based with a replication appliance | Also used for some virtual machines on other platforms |
| Virtual machines in other public clouds | Treated like physical servers using agents | Useful for consolidating clouds or leaving another provider |
Before you replicate
Check prerequisites
Supported operating systems, disk limits and network connectivity from the source to Azure.
Prepare the target
Choose the target subscription, region, virtual network, subnet and availability settings in your landing zone.
Decide on sizes and disks
Use assessment recommendations, then adjust per server where you know better.
Plan bandwidth
Estimate how long the initial copy will take, and schedule replication so it does not starve business traffic.
Reducing downtime
Because the source server stays online during replication, downtime is limited to the cutover window, often minutes to a couple of hours depending on the application and the amount of changed data. Applications that cannot tolerate even that, such as busy databases, may use their own replication technologies, such as built-in database replication, in combination with the migration plan.
Imagine moving a library while it stays open. Volunteers copy the books to the new building in the background, keep copying new returns, and on moving day the library closes only long enough to copy the last few returns and change the sign on the door.
Write a step-by-step cutover runbook, assign roles, and rehearse with a test migration. The best cutovers feel boring because nothing unexpected is left.
Keep the source server intact until the migrated system is validated. If something goes wrong, you can switch back instead of improvising under pressure. Decide in advance how long you will keep the old system.
11Databases, Web Apps, Data and Other Workloads
Servers are only part of the estate.
An environment contains more than virtual machines. Databases, web applications, large file stores and virtual desktops each have their own migration paths, and Azure Migrate acts as the hub that points to the right tools.
SQL Server and other databases
Assessments check compatibility with managed Azure database services and recommend a target. Database migration tools then move schema and data with minimal downtime for supported source and target pairs. Modernising to a managed database removes patching and backup chores.
Web applications
Assessments check whether websites running on Windows or Linux web servers can move to the managed web hosting service in Azure. A companion migration tool helps move supported applications with fewer changes than rebuilding.
Large datasets and file shares
Dedicated services move files over the network, or by shipping physical devices for very large volumes where bandwidth would make network transfer too slow.
VMware workloads moving as they are
Azure VMware Solution lets VMware environments move with little change into dedicated hosts in Azure, often as a first step before gradual modernisation.
Containerised and Java applications
Newer assessment options look at applications such as Java web apps for movement to container platforms. Support is expanding, so check the current list of supported application types.
Not every migration is performed inside Azure Migrate itself. Sometimes the hub assesses and plans, and a specialised service does the actual transfer. Treat the hub as your control room, and use the best tool for each workload type.
A database that migrates successfully may still behave differently under the new platform. Test with realistic data and workload, check performance, and verify features your application depends on.
12Security, Networking and Data Protection
A migration moves your most sensitive data. Protect it at every step.
During a migration, data is copied, stored temporarily and used to create new systems. Credentials are used, new network paths are opened and many people hold unusual access. Each of these deserves attention.
Appliance hardening
Treat the appliance as a sensitive system. Restrict who can log in, keep it patched and limit its network exposure.
Least privilege credentials
Use read-only accounts for discovery and give migration roles only the permissions they need, only for as long as needed.
Private connectivity
Where policy requires it, send discovery and replication traffic over private connections instead of the public internet, using supported private networking options.
Encryption
Replicated data is encrypted in transit and at rest. Decide whether you need your own keys for stricter requirements.
Role-based access to the project
Limit who can see inventory, create assessments, start replication and perform cutover. Cutover rights especially should be tightly held.
Clean up afterwards
Remove temporary storage, replication appliances and elevated access once migration is complete.
During a house move, the moving crew carries your belongings, holds your keys and sees everything you own. You would choose a vetted crew, give each person access only to the rooms they need, and collect the keys when the job is done.
A lift and shift copies old vulnerabilities, weak settings and unsupported software into Azure. Plan security updates and posture improvements as part of, or immediately after, the move, rather than assuming the cloud fixes them.
Discovery shows unsupported operating systems and old software versions. Treat that list as a security finding, and plan upgrades or retirements for the worst cases.
13After the Move: Validate, Optimise and Decommission
The migration is not finished at cutover.
Many programmes celebrate the cutover and forget the work after it. Yet the savings and benefits of cloud come from what happens next: tuning, protecting and cleaning up.
Validate
Confirm the application works for real users, check performance against what you saw on-premises, and verify integrations and scheduled jobs.
Protect
Enable backup, security monitoring, update management and disaster recovery for the migrated servers.
Right-size
With real usage now measured in Azure, shrink machines that are over-provisioned and consider reserved pricing for steady workloads.
Modernise gradually
Convert suitable databases and web servers into managed services once the move is stable.
Decommission
After an agreed safety period, switch off and remove the old servers, so you stop paying for both worlds.
The most common financial surprise is running both environments for months. Set a firm date to decommission old servers, with owners accountable, and track it as part of the programme’s success measures.
Keep records of assessments, test results and approvals. Auditors, security teams and future migration teams will want to know what was moved, when and why.
14Monitoring, Logging and Metrics
A migration programme needs a dashboard as much as an application does.
Replication runs for days or weeks, across hundreds of servers, and can stall for many small reasons. Without monitoring, a server may sit stuck while everyone believes it is ready. Good tracking happens at three levels.
Replication health
The migration tool shows the status of each server’s replication: initial copy progress, delta cycles, health warnings and errors. Common issues include a lack of storage space on the source, network interruptions, expired credentials or an unreachable appliance. Review replication health daily during active migration, and set alerts for servers that stop progressing.
Programme progress
Track how many servers or applications are discovered, assessed, replicating, tested and cut over. This gives programme managers a clear picture and allows early detection of slipping waves.
Post-migration health
Once servers run in Azure, normal monitoring takes over. Use Azure Monitor and application monitoring to compare performance and error rates before and after the move, and to detect problems introduced by the new environment.
Record performance and error rates of key applications before migration. Without a baseline, nobody can say whether the application is faster, slower or the same afterwards.
A replication warning that looks minor, such as repeated failed cycles, can turn into a long delay on the day of cutover. Fix issues as they appear rather than during the migration window.
15Cost, Licensing and Savings
The tools are often free; the cloud resources they create are not.
Azure Migrate’s discovery and assessment capabilities have been offered without a separate charge, and the migration tool has historically been free for a period of replication per server, with charges for the Azure resources used. Pricing details and free periods can change, and some related services have their own pricing, so check the official pricing and documentation pages for current terms.
Where costs actually appear
Replication storage and compute
Replicated disks sit in storage in your subscription during migration, and some scenarios use small amounts of compute. These costs are modest per server but add up over long programmes.
Test migrations
Each test starts a virtual machine for a short time. Clean them up promptly to avoid forgotten machines running up bills.
Azure resources after cutover
The real ongoing cost: virtual machines, disks, networking, backup and monitoring.
Network and data transfer
Dedicated connectivity and large transfers can carry their own charges.
Ways to save
Bring existing licences
Licence benefits for eligible Windows Server, SQL Server and certain Linux subscriptions can reduce costs significantly, and the business case can model them.
Reserved instances and savings plans
Committing to steady usage earns discounts, best applied after right-sizing.
Right-size early and again later
Start from performance-based recommendations and revisit after measuring real usage in Azure.
Retire what nobody uses
Every server switched off instead of migrated is the cheapest migration of all.
Microsoft and its partners have offered programmes that provide guidance, tooling support or funding for migrations. Availability and terms vary, so ask your Microsoft contact or partner about current options before you plan the budget.
16Scaling Up: Large Programmes and Automation
Doing it once is a project. Doing it a thousand times is a factory.
Moving ten servers can be done by hand. Moving two thousand needs a repeatable process, clear roles and automation. Mature programmes treat migration as an assembly line.
Organise the people
A central migration team
Owns the tooling, the runbooks, the landing zone and the schedule, and supports application teams.
Application owners
Know how each application should behave, provide test plans and sign off on cutover.
Security, network and operations teams
Approve designs, prepare connectivity and take over run operations after the move.
Automate the repeatable parts
Replication setup, tagging, naming and post-migration configuration can be scripted using command line tools, scripting modules and templates. Automating them reduces errors and lets small teams handle large waves. Documented runbooks, standard test checklists and clear communication templates make each wave faster than the last.
Habits of scalable programmes
- Standard runbooks and test checklists
- Automation for repeatable steps
- Regular retrospectives after each wave
- A single source of truth for status
Signs of trouble
- Each wave invents its own process
- Status lives in private spreadsheets
- Application owners learn of cutovers late
Moving a single flat can be improvised. Moving a whole city needs timetables, standard boxes, labelled routes and teams who each know their part. The more you repeat, the more every step should be written down and automated.
17Design Patterns and Anti-patterns
Shapes that work, and shortcuts that hurt later.
Patterns worth adopting
Discover before deciding
Gather real inventory and performance data first, then choose strategies, rather than guessing from old spreadsheets.
Landing zone first
Prepare networking, identity, governance and monitoring before the first server moves.
Pilot wave, then scale
Start with simple workloads to prove the process, fix the rough edges and build confidence.
Move applications, not servers
Use dependency data to move whole applications together, avoiding painful hybrid traffic.
Test early, test often
Repeated test migrations expose problems while there is still time to fix them.
Migrate, then optimise
Get workloads running safely first, then right-size and modernise using real measurements.
Anti-patterns to avoid
Problem
The programme starts moving servers immediately, using a spreadsheet of unknown accuracy.
Why It’s Harmful
Hidden dependencies break, forgotten servers are missed or moved unnecessarily, and sizes are guesses that inflate cost.
Correct Approach
Run discovery long enough to capture real usage, review dependencies, and plan from evidence.
Problem
Servers are migrated into a hastily created network with no governance, naming or security baseline.
Why It’s Harmful
The result is a messy, insecure estate that is expensive to fix later, because every moved resource must be touched again.
Correct Approach
Build a landing zone first, and make every migration target land inside it.
Problem
Every server is rehosted at its old size without checking real usage.
Why It’s Harmful
Over-provisioning from the data centre era is carried into a pay-as-you-go world, and bills come as a shock.
Correct Approach
Use performance-based sizing, review recommendations and right-size again after real data arrives in Azure.
Problem
Old servers are left running after cutover for months with no end date.
Why It’s Harmful
The organisation pays for two environments, security risks persist and nobody knows which copy is authoritative.
Correct Approach
Agree a retention period for rollback, then decommission on schedule, with named owners.
18Best Practices and Common Mistakes
Habits that separate calm migrations from heroic ones.
Best practices
- Start with the business reason. Know whether the goal is closing a data centre, saving cost, gaining agility or meeting a deadline, because the goal shapes every decision.
- Collect enough performance history. Include your busiest periods so sizing reflects real peaks.
- Use dependency analysis. Keep tightly connected servers in the same wave.
- Prepare the landing zone. Networking, identity, governance and monitoring come first.
- Test migrations repeatedly. Rehearse cutover with runbooks and named roles.
- Plan the downtime. Agree windows with the business and communicate clearly and early.
- Keep a rollback route. Retain the source until validation is complete.
- Secure the process. Least-privilege access, hardened appliances and clean-up afterwards.
- Optimise after the move. Right-size, apply commitments and modernise gradually.
- Check official sources often. Features, previews and supported scenarios change frequently.
Common mistakes
Treating assessment cost as a quote. It is an estimate based on assumptions. Validate with pricing tools, discounts and a pilot before committing budgets.
Ignoring network readiness. Overlapping address ranges, missing firewall rules or insufficient bandwidth are the most common reasons replication or test migrations fail.
Forgetting licensing and activation. Some software is tied to hardware or needs reactivation after moving. Check licence terms during planning, not on cutover night.
Overlooking unsupported operating systems. Servers running very old software may not be eligible for direct migration, or may need special handling, and are often security risks. Identify them early.
Assuming previews are production-ready. New discovery methods and reports may start as previews with limitations. Use them with caution and always confirm their status before basing commitments on them.
When discovery or replication stalls, check in this order: Is the appliance running and able to reach the project and the source? Are credentials valid and permissions sufficient? Are required ports and endpoints allowed by firewalls? Is there enough free space and bandwidth? What do the health messages for that specific server say? Most problems turn out to be connectivity or credentials.
19Real-world and Industry Examples
How different organisations put the moving company to work.
The following scenarios are typical patterns rather than descriptions of specific companies. They show how the same capabilities combine for very different needs.
Retailer closing an ageing data centre
A retailer with a lease ending in eighteen months discovers its estate, finds that a fifth of its servers are idle, retires them, and migrates the rest in waves. Dependency maps keep the ordering system and its database together, and cutovers are scheduled outside peak trading.
Bank balancing regulation and speed
A bank builds a controlled landing zone with private connectivity, strict access roles and central logging. Assessments identify unsupported operating systems, which are upgraded before migration. Evidence from each test and approval is stored for auditors.
Manufacturer with mixed environments
A manufacturer runs VMware in head office, Hyper-V in factories and a few physical machines controlling equipment. It uses different migration methods for each, while tracking everything in one project. Plant systems with strict timing are retained on site for now.
Software company leaving another cloud
A company consolidating clouds treats its virtual machines elsewhere like physical servers, using agent-based replication to move them to Azure in a small number of weekend windows.
Public sector with a tight budget
A public body builds a quick business case from an inventory file to win funding, then refines it using appliance data. Licence benefits and right-sizing make the case stronger, and early waves target low-risk systems.
Healthcare provider modernising databases
A provider assesses its database servers, moves suitable ones to managed database services and rehosts others. Cutovers are rehearsed with application owners, and monitoring baselines confirm that performance matches expectations.
Company merging after an acquisition
After an acquisition, the merged company discovers both estates, uses the business case to compare consolidation options and moves both into a single landing zone to simplify operations.
20Frequently Asked Questions
Quick answers to questions that come up again and again.
No. It is a hub covering discovery, assessment, business cases and migration of servers, and it points to companion tools for databases, web applications and data.
For VMware virtual machines the agentless method needs no software inside the servers, only the appliance. Agent-based methods, used for physical servers and other clouds, do install components.
No. It communicates outbound to Azure and connects to your own infrastructure with the accounts you provide, which keeps firewall requirements simple.
They are estimates based on discovered data and your assumptions, and they are useful for planning. Actual bills depend on usage, discounts and additional services.
Only during cutover, because the server stays online while data replicates. The window depends on the application and how much data changed, and is commonly minutes to a few hours.
A test migration starts a copy in an isolated network to prove it works, leaving the source untouched. A cutover is the real, final move that makes the Azure copy the live system.
Yes. Virtual machines in other clouds are treated like physical servers and moved using agent-based replication.
Azure Migrate assesses them and guides you to companion migration tools for managed database and web hosting services, in addition to moving the servers they run on.
If you need funding or approval, it helps greatly. It compares on-premises costs with Azure over several years and can model licence benefits and commitment discounts.
Not necessarily. Several newer capabilities, such as discovery through Azure Arc and some reporting and planning features, have been introduced as previews. Check the current status in the official documentation before depending on them.
Validate the workload, enable backup and monitoring, right-size resources, apply pricing commitments where sensible and decommission the old servers on a firm schedule.
21Summary and Key Takeaways
Azure Migrate is the survey team, the planner and the moving crew for your journey to Azure. It discovers what you own, assesses readiness, size and cost, models the business case, plans waves, replicates and cuts over servers with little downtime, and points to the right tools for databases, web applications and data. Success depends less on the tool and more on the discipline around it: discover thoroughly, prepare a landing zone, move whole applications in sensible waves, rehearse every cutover, secure the process and optimise afterwards. Because the platform evolves quickly, with new discovery methods and planning features appearing, always confirm current capabilities and their maturity in the official documentation.
Key Takeaways
- It is a hub, not just a copier — discovery, assessment, business case and migration live in one project, with companion tools for databases, web apps and data.
- Discover before you decide — real inventory, performance and dependency data beats any spreadsheet and drives right-sizing and wave design.
- Choose a strategy per workload — rehost, replatform, refactor, replace, retire or retain, using assessment data plus business context.
- Prepare the landing zone first — networking, identity, governance, security and monitoring must exist before the first server arrives.
- Replicate, test, then cut over — keep the source online during replication, rehearse with test migrations and keep a rollback route.
- Move applications in waves — keep dependent servers together, start with simple pilots and learn before moving critical systems.
- The work continues after cutover — validate, protect, right-size, modernise and decommission on schedule, and verify the status of newer features before relying on them.