program-master-schedule.xml 1 2027-01-04T08:00:00 08:00:00 17:00:00 480 2400 20 7 1 1 Standard 1 -1 1 0 2 1 08:00:0012:00:00 13:00:0017:00:00 3 1 08:00:0012:00:00 13:00:0017:00:00 4 1 08:00:0012:00:00 13:00:0017:00:00 5 1 08:00:0012:00:00 13:00:0017:00:00 6 1 08:00:0012:00:00 13:00:0017:00:00 7 0 1 1 Phase 0 — Pre-flight 1 1

1

2027-01-04T08:00:00 2027-01-29T17:00:00 2 2 D01 Approve Phase 0 and name the sponsor and steward 1.1 2 2027-01-04T08:00:00 2027-01-04T08:00:00 PT0H0M0S 7 1 Executive sponsor and CIO Owner or approver: Executive sponsor and CIO Options: Approve the four-week pre-flight; defer If decided late: Nothing starts; the external clocks keep running Source: ../start-here.md 3 3 P0.1 Charter accepted; owners named in the decision matrix 1.2 2 2027-01-04T08:00:00 2027-01-06T17:00:00 PT24H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b00-orientation/03-the-charter.md 2 1 0 7 4 4 P0.2 Platform host built, repository seeded, host connected through Arc 1.3 2 2027-01-07T08:00:00 2027-01-15T17:00:00 PT56H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/03-platform-foundation.md 3 1 0 7 5 5 P0.3 Least-privilege service principals for Entra ID, Intune and Arc 1.4 2 2027-01-07T08:00:00 2027-01-11T17:00:00 PT24H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-0-pre-flight-weeks-14 3 1 0 7 6 6 P0.4 Read-only assessment run and committed 1.5 2 2027-01-18T08:00:00 2027-01-29T17:00:00 PT80H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b00-orientation/08-pre-flight-and-assessment.md 4 1 0 7 5 1 0 7 7 7 P0.5 Transactions profiled for applications proposed to move from their data 1.6 2 2027-01-07T08:00:00 2027-01-18T17:00:00 PT64H0M0S 7 0 Application owners Owner or approver: Application owners Source: ../books/b01-transformation-arc/10-analyzing-the-estate.md#profiling-transactions-before-separation 3 1 0 7 8 8 P0.6 Change process asks whether each change adds an AD dependency; exceptions to the AO 1.7 2 2027-01-07T08:00:00 2027-01-11T17:00:00 PT24H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b13-governance/04-change-control-and-provenance.md#no-new-dependencies-on-active-directory 3 1 0 7 9 9 D11 Provisional target end state: AD retired, or a dated Kerberos island 1.8 2 2027-01-29T17:00:00 2027-01-29T17:00:00 PT0H0M0S 7 1 Executive sponsor and CIO Owner or approver: Executive sponsor and CIO Options: AD retired completely; a Kerberos island for named workloads, with an end date If decided late: G0 can't pass: owners and budgets plan without a stated goal Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-0-pre-flight-weeks-14 6 1 0 7 10 10 G0 — Ready to Plan 1.9 2 2027-01-29T17:00:00 2027-01-29T17:00:00 PT0H0M0S 7 1 Steward (backup: executive sponsor) Owner or approver: Steward (backup: executive sponsor) Criteria: Platform host operational; assessment committed; no open priority-one findings; provisional target end state recorded; no-new-AD-dependency rule in force Source: ../books/b01-transformation-arc/12-migration-roadmap.md#gates-rollback-and-authority 6 1 0 7 7 1 0 7 8 1 0 7 9 1 0 7 11 11 Phase 1 — Foundation 2 1

1

2027-02-01T08:00:00 2027-02-26T17:00:00 12 12 D02 Authoritative source for each attribute that drives access 2.1 2 2027-01-29T17:00:00 2027-01-29T17:00:00 PT0H0M0S 7 1 HR Owner or approver: HR Options: HR system per attribute; a named alternative with a dated exception If decided late: The taxonomy can't be approved, and the whole critical path waits Source: ../books/b01-transformation-arc/09-who-leads-the-transformation.md#decision-rights-across-the-program 10 1 0 7 13 13 P1.1 Attribute taxonomy finalized (M-014) 2.2 2 2027-02-01T08:00:00 2027-02-05T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 12 1 0 7 14 14 P1.2 Dynamic group design tested; enterprise groups and administrative units built (M-015) 2.3 2 2027-02-08T08:00:00 2027-02-17T17:00:00 PT64H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 13 1 0 7 15 15 P1.3 Intune policy design complete; pilot profiles staged (M-016) 2.4 2 2027-02-18T08:00:00 2027-02-24T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 14 1 0 7 16 16 X-IDL HR-to-cloud provisioning live for the foundation scope 2.5 2 2027-02-26T17:00:00 2027-02-26T17:00:00 PT0H0M0S 7 1 ISSO (Identity Lifecycle & Provisioning plan) Owner or approver: ISSO (Identity Lifecycle & Provisioning plan) If decided late: G1 fails its HR-feed criterion and waits Source: identity-lifecycle.md 4 2027-02-26T17:00:00 17 17 P1.5 Conditional Access design running in report-only (M-017) 2.6 2 2027-02-01T08:00:00 2027-02-12T17:00:00 PT80H0M0S 7 0 CISO Owner or approver: CISO Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 10 1 0 7 18 18 D03 Enforce the Conditional Access baseline 2.7 2 2027-02-12T17:00:00 2027-02-12T17:00:00 PT0H0M0S 7 1 CISO Owner or approver: CISO Options: Enforce; extend report-only; enforce with dated exceptions If decided late: G1 can't pass: the baseline must be enforced Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-1-foundation-weeks-58 17 1 0 7 19 19 P1.6 Baseline enforced; emergency access accounts vaulted and tested 2.8 2 2027-02-15T08:00:00 2027-02-17T17:00:00 PT24H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-1-foundation-weeks-58 18 1 0 7 20 20 P1.7 Sync and DNS Private Resolver designs; resolver deployed (M-018, M-019) 2.9 2 2027-02-01T08:00:00 2027-02-12T17:00:00 PT80H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 10 1 0 7 21 21 D04 Root of trust for device certificates 2.10 2 2027-01-29T17:00:00 2027-01-29T17:00:00 PT0H0M0S 7 1 Program office Owner or approver: Program office Options: Cloud PKI root; bring-your-own CA If decided late: The PKI design and the pilot certificates wait Source: ../books/b07-pki/index.md 10 1 0 7 22 22 P1.8 Cloud PKI design; issuing CA created (M-020) 2.11 2 2027-02-08T08:00:00 2027-02-17T17:00:00 PT64H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 21 1 0 7 13 1 0 7 23 23 P1.9 IPAM covers the platform host and Tier 0 2.12 2 2027-02-01T08:00:00 2027-02-12T17:00:00 PT80H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b08-ddi/10-migration-sequence.md 10 1 0 7 24 24 P1.10 Single sign-on; FIDO2 and passkeys open to Tier 0 administrators 2.13 2 2027-02-01T08:00:00 2027-02-10T17:00:00 PT64H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b04-access/index.md 10 1 0 7 25 25 P1.11 Every High assessment finding remediated and re-scanned 2.14 2 2027-02-01T08:00:00 2027-02-19T17:00:00 PT120H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#foundation-build-and-pre-pilot-readiness 10 1 0 7 26 26 D05 Choose the pilot division 2.15 2 2027-01-29T17:00:00 2027-01-29T17:00:00 PT0H0M0S 7 1 Program office Owner or approver: Program office Options: IT (tolerates disruption best); another division plus volunteers If decided late: Pilot groups can't be built; G1 fails its pilot-readiness criterion Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#scope 10 1 0 7 27 27 P1.12 Design review approved (M-021) 2.16 2 2027-02-25T08:00:00 2027-02-26T17:00:00 PT16H0M0S 7 0 Steward Owner or approver: Steward Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#design-milestones 15 1 0 7 20 1 0 7 22 1 0 7 26 1 0 7 28 28 P1.13 Pilot servers connected through Arc with machine configuration applied (M-030) 2.17 2 2027-02-15T08:00:00 2027-02-26T17:00:00 PT80H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b05-devices/09-servers-under-azure-arc.md 10 1 48000 7 29 29 G1 — Foundation Complete 2.18 2 2027-02-26T17:00:00 2027-02-26T17:00:00 PT0H0M0S 7 1 Steward Owner or approver: Steward Criteria: Designs approved; groups and AUs drift-clean; baseline Conditional Access enforced; emergency access tested; Tier 0 in IPAM; HR feed live for the foundation scope; pilot servers connected through Arc; FIDO2 and passkeys open to Tier 0 administrators; High findings closed Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#gate-g1-foundation-complete 27 1 0 7 16 1 0 7 19 1 0 7 23 1 0 7 24 1 0 7 25 1 0 7 28 1 0 7 30 30 Phase 2 — Pilot division 3 1

1

2027-03-01T08:00:00 2027-04-23T17:00:00 31 31 D06 Device pattern for each pilot cohort 3.1 2 2027-02-26T17:00:00 2027-02-26T17:00:00 PT0H0M0S 7 1 Program office Owner or approver: Program office Options: New devices Entra joined; existing devices reset and re-enrolled; hybrid joined only with a cut date If decided late: Pilot devices can't move; the critical path waits Source: ../books/b05-devices/02-the-hybrid-join-trap.md 29 1 0 7 32 32 P2.1 Sync deployed; pilot attributes, groups, AUs and delegated roles live (M-022) 3.2 2 2027-03-01T08:00:00 2027-03-12T17:00:00 PT80H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones 29 1 0 7 33 33 P2.2 Pilot Conditional Access and Intune policies assigned (M-024, M-025) 3.3 2 2027-03-15T08:00:00 2027-03-19T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones 32 1 0 7 34 34 P2.3 Pilot devices moved by pattern (M-023) 3.4 2 2027-03-22T08:00:00 2027-03-31T17:00:00 PT64H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones 33 1 0 7 31 1 0 7 35 35 P2.4 First migrated GPOs unlinked from the pilot OUs, after 20 days of testing beside the linked GPOs 3.5 2 2027-04-19T08:00:00 2027-04-23T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b05-devices/07-the-gpo-sunset-program.md 33 1 96000 7 36 36 P2.5 PIM for every pilot administrator (M-026) 3.6 2 2027-03-15T08:00:00 2027-03-19T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones 32 1 0 7 37 37 P2.6 Division DNS migrated, DHCP re-homed, hybrid resolution validated (M-027) 3.7 2 2027-03-01T08:00:00 2027-03-19T17:00:00 PT120H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b08-ddi/10-migration-sequence.md 29 1 0 7 38 38 P2.7 Cloud PKI certificates issued; Wi-Fi and VPN verified (M-028) 3.8 2 2027-04-01T08:00:00 2027-04-09T17:00:00 PT56H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones 34 1 0 7 39 39 P2.8 Certificate-based authentication for PIV and CAC holders (M-029) 3.9 2 2027-03-15T08:00:00 2027-03-24T17:00:00 PT64H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones 32 1 0 7 40 40 P2.10 Rollback rehearsed surface by surface 3.10 2 2027-04-01T08:00:00 2027-04-05T17:00:00 PT24H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#rollback-surface-by-surface 34 1 0 7 41 41 P2.11 Drift-clean hold (14 days, illustrative); success criteria met (M-031) 3.11 2 2027-04-12T08:00:00 2027-04-23T17:00:00 PT80H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#gate-g2-pilot-clean 36 1 0 7 37 1 0 7 38 1 0 7 39 1 0 7 40 1 0 7 42 42 P2.12 Retrospective and runbook updates committed 3.12 2 2027-04-19T08:00:00 2027-04-23T17:00:00 PT40H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#gate-g2-pilot-clean 41 3 24000 7 43 43 G2 — Pilot Clean 3.13 2 2027-04-23T17:00:00 2027-04-23T17:00:00 PT0H0M0S 7 1 Steward and executive sponsor (co-signed) Owner or approver: Steward and executive sponsor (co-signed) Criteria: Zero drift for the hold period; no AD-only users and no hybrid-joined PC without a cut date; no unresolved rollback trigger; retrospective committed Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#gate-g2-pilot-clean 41 1 0 7 42 1 0 7 35 1 0 7 44 44 Phase 3 — General rollout 4 1

1

2027-04-26T08:00:00 2027-09-10T17:00:00 45 45 D07 Wave plan: which divisions, in which order 4.1 2 2027-04-23T17:00:00 2027-04-23T17:00:00 PT0H0M0S 7 1 Executive sponsor and steering committee Owner or approver: Executive sponsor and steering committee Options: By region, lowest risk first; by department If decided late: Wave 1 can't start; the critical path waits Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#waves-defined-by-attribute-values 43 1 0 7 46 46 P3.1 Wave 1, first region, about 25% (M-032) 4.2 2 2027-04-26T08:00:00 2027-05-25T17:00:00 PT176H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones-1 45 1 0 7 47 47 P3.2 Wave 2, about 50% cumulative (M-033) 4.3 2 2027-05-26T08:00:00 2027-06-24T17:00:00 PT176H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones-1 46 1 0 7 48 48 P3.3 Wave 3, about 75% cumulative (M-034) 4.4 2 2027-06-25T08:00:00 2027-07-26T17:00:00 PT176H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones-1 47 1 0 7 49 49 P3.4 Wave 4, everything remaining or excepted (M-035) 4.5 2 2027-07-27T08:00:00 2027-08-25T17:00:00 PT176H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones-1 48 1 0 7 50 50 P3.5 GPO links off migrated OUs after 7 clean days (M-036) 4.6 2 2027-08-19T08:00:00 2027-08-25T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#milestones-1 49 3 81600 7 51 51 P3.6 Attribute coverage at 100%; exception register reconciled (M-037) 4.7 2 2027-08-26T08:00:00 2027-09-10T17:00:00 PT96H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b00-orientation/09-design-pilot-and-rollout.md#gate-g3-rollout-complete 49 1 0 7 52 52 P3.7 Every server Arc-connected or excepted 4.8 2 2027-04-26T08:00:00 2027-07-16T17:00:00 PT480H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b05-devices/09-servers-under-azure-arc.md 43 1 0 7 53 53 G3 — Rollout Complete 4.9 2 2027-09-10T17:00:00 2027-09-10T17:00:00 PT0H0M0S 7 1 Executive sponsor and steering committee Owner or approver: Executive sponsor and steering committee Criteria: Every division past its exit gate; every HR-listed employee with valid attributes; every PC cloud-joined and every server Arc-connected, or excepted; zero cross-division drift Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-3-general-rollout-weeks-1736 50 1 0 7 51 1 0 7 52 1 0 7 54 54 Phase 4 — Legacy retirement 5 1

1

2027-04-26T08:00:00 2027-11-05T17:00:00 55 55 D08 End dates for legacy authentication and NTLM 5.1 2 2027-04-23T17:00:00 2027-04-23T17:00:00 PT0H0M0S 7 1 Authorizing official Owner or approver: Authorizing official Options: A dated end per protocol; a dated, risk-accepted exception per application If decided late: Application owners have no date to plan against; SPN retirement slips Source: ../books/b01-transformation-arc/09-who-leads-the-transformation.md#decision-rights-across-the-program 43 1 0 7 56 56 P4.1 Migrated GPOs disabled and held as the rollback net (deletion follows the 90-day hold: Endpoint plan E5.2) 5.2 2 2027-09-13T08:00:00 2027-09-17T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-4-legacy-retirement-weeks-3744 53 1 0 7 57 57 P4.2 OU-based security groups retired 5.3 2 2027-09-20T08:00:00 2027-09-24T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-4-legacy-retirement-weeks-3744 56 1 0 7 58 58 P4.3 AD-integrated DNS zones moved, except the domain's own zones 5.4 2 2027-09-13T08:00:00 2027-10-01T17:00:00 PT120H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b08-ddi/10-migration-sequence.md 53 1 0 7 59 59 P4.4 DHCP scopes moved off the AD-authorized servers (de-authorizing them is the Network plan's D-N12) 5.5 2 2027-10-04T08:00:00 2027-10-08T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-4-legacy-retirement-weeks-3744 58 1 0 7 60 60 P4.5 User and device issuance off AD CS; smart-card logon GPO retired 5.6 2 2027-09-13T08:00:00 2027-10-01T17:00:00 PT120H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b07-pki/07-coexistence-and-migration.md 53 1 0 7 61 61 P4.6 AD-bound service principal names migrated, retired or islanded, app by app 5.7 2 2027-09-13T08:00:00 2027-10-22T17:00:00 PT240H0M0S 7 0 Application owners Owner or approver: Application owners Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-4-legacy-retirement-weeks-3744 53 1 0 7 55 1 0 7 62 62 P4.7 AD authentication volume measured below the agreed threshold 5.8 2 2027-10-25T08:00:00 2027-11-05T17:00:00 PT80H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-4-legacy-retirement-weeks-3744 61 1 0 7 57 1 0 7 59 1 0 7 60 1 0 7 63 63 G4 — Legacy Quiet 5.9 2 2027-11-05T17:00:00 2027-11-05T17:00:00 PT0H0M0S 7 1 Steward (backup: executive sponsor) Owner or approver: Steward (backup: executive sponsor) Criteria: Only the minimum GPOs; no AD security groups in use; every zone but the domain's moved; user and device issuance off AD CS; every SPN migrated, retired or islanded; AD authentication below threshold Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-4-legacy-retirement-weeks-3744 62 1 0 7 64 64 Phase 5 — AD DS retirement 6 1

1

2027-09-13T08:00:00 2027-12-03T17:00:00 65 65 D09 Confirm or revise the target end state set at G0 (D11) 6.1 2 2027-09-10T17:00:00 2027-09-10T17:00:00 PT0H0M0S 7 1 Executive sponsor and CIO Owner or approver: Executive sponsor and CIO Options: Confirm the G0 target; revise it with what Phase 4 left: retire completely, or keep a documented island with an end-of-life date If decided late: The demotion sequence can't be planned Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-5-ad-ds-retirement-weeks-4548 53 1 0 7 9 1 0 7 66 66 D10 Retention of AD-era logs and records 6.2 2 2027-09-10T17:00:00 2027-09-10T17:00:00 PT0H0M0S 7 1 Records officer Owner or approver: Records officer Options: Retention schedule and archive location approved If decided late: Domain controllers can't be decommissioned: their logs can't be recovered afterward Source: ../books/b01-transformation-arc/09-who-leads-the-transformation.md#decision-rights-across-the-program 53 1 0 7 67 67 P5.1 AD changes frozen; final assessment and evidence packet 6.3 2 2027-11-08T08:00:00 2027-11-12T17:00:00 PT40H0M0S 7 0 Program office Owner or approver: Program office Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-5-ad-ds-retirement-weeks-4548 63 1 0 7 68 68 P5.2 Domain controllers without operations master roles demoted 6.4 2 2027-11-15T08:00:00 2027-11-19T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-5-ad-ds-retirement-weeks-4548 67 1 0 7 65 1 0 7 69 69 P5.3 Remaining domain controllers demoted or islanded; domain zones moved or retired 6.5 2 2027-11-22T08:00:00 2027-11-26T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-5-ad-ds-retirement-weeks-4548 68 1 0 7 70 70 P5.4 VMs decommissioned; final state archived; retirement record committed 6.6 2 2027-11-29T08:00:00 2027-12-03T17:00:00 PT40H0M0S 7 0 Platform teams Owner or approver: Platform teams Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-5-ad-ds-retirement-weeks-4548 69 1 0 7 66 1 0 7 71 71 G5 — AD Retired 6.7 2 2027-12-03T17:00:00 2027-12-03T17:00:00 PT0H0M0S 7 1 Executive sponsor and CIO Owner or approver: Executive sponsor and CIO Criteria: Domain controllers decommissioned or a dated Kerberos island; evidence packet in the repository and the SIEM; no production dependency on AD authentication Source: ../books/b01-transformation-arc/12-migration-roadmap.md#phase-5-ad-ds-retirement-weeks-4548 70 1 0 7