All work
Case study 022025

CrowdStrike Tenant Migration

Moved 2,500+ endpoints across seven domains to a new CrowdStrike tenant before a fixed licence expiry, with no host left behind and no service impact.

2,500+
Sensors removed and reinstalled
7
AD domains in scope
0
Hosts left on the old tenant

The problem

A licensing change meant every endpoint had to move to a new CrowdStrike tenant by a fixed date. With no bulk transfer available, each sensor had to be uninstalled and a new one installed, and a host that failed halfway would be unprotected and invisible in both consoles.

What I did

  1. 1

    Own the inventory

    Built the host list from Active Directory and Intune, so a missing machine showed up by name rather than as a lower count.

  2. 2

    One run per host

    Packaged uninstall and reinstall as a single sequenced run, so no machine sat unprotected between the two.

  3. 3

    Policies ready first

    Rebuilt host groups and prevention policies in the new tenant beforehand, so each host was protected on first check-in.

  4. 4

    Reach every machine

    Delivered through Intune, Group Policy and a runbook for site engineers, and tracked every host to completion.

Trigger
  • Licensing change
  • Fixed expiry date
Route
  • Uninstall + install as one run
  • Intune · GPO · site engineers
Proof
  • Per-host tracking
  • Checked in new console
No transfer path, so every sensor came off and went back on, tracked outside both consoles.

Result

  • 2,500+ endpoints moved ahead of the licence expiry, every one accounted for.
  • Protection confirmed in the new console, not assumed from deployment reports.
  • No service impact and no change visible to users.