sync: auto-sync from HOWARD-HOME at 2026-04-22 17:39:56
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-04-22 17:39:56
This commit is contained in:
@@ -0,0 +1,89 @@
|
||||
# CS-SERVER Entra Connect Pre-flight Remediation Result
|
||||
|
||||
**Command ID:** 1bb38813-57ae-4321-ba81-e8dc7ea4a30d
|
||||
**Run at:** 2026-04-23T00:37:14.365639Z
|
||||
**Completed:** 2026-04-23T00:39:04.479126Z
|
||||
**Exit code:** 0
|
||||
|
||||
## STDOUT
|
||||
|
||||
```
|
||||
|
||||
|
||||
========================================================================
|
||||
|
||||
== 0. Pre-flight snapshot (rollback material)
|
||||
|
||||
========================================================================
|
||||
|
||||
[OK] Backup dir: D:\Backups\pre-entra-connect-2026-04-22-1736
|
||||
|
||||
[OK] Registry pre-state exported (.NET + Schannel Protocols)
|
||||
|
||||
[OK] w32tm pre-state captured
|
||||
|
||||
[OK] Event log snapshot saved (200 System events)
|
||||
|
||||
|
||||
|
||||
To roll back TLS changes after reboot:
|
||||
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-64.reg
|
||||
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-32.reg
|
||||
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\schannel-protocols-pre.reg
|
||||
Restart-Computer
|
||||
|
||||
|
||||
|
||||
========================================================================
|
||||
|
||||
== 1. Time sync fix (w32tm) - no reboot
|
||||
|
||||
========================================================================
|
||||
|
||||
[OK] Configured w32tm peer list: time.windows.com,0x8 pool.ntp.org,0x8 time.nist.gov,0x8
|
||||
|
||||
[OK] Restarted w32time service
|
||||
|
||||
Leap Indicator: 0(no warning)
|
||||
|
||||
Stratum: 4 (secondary reference - syncd by (S)NTP)
|
||||
|
||||
Precision: -23 (119.209ns per tick)
|
||||
|
||||
Root Delay: 0.0311588s
|
||||
|
||||
Root Dispersion: 61.0046385s
|
||||
|
||||
ReferenceId: 0x287706E4 (source IP: 40.119.6.228)
|
||||
|
||||
Last Successful Sync Time: 4/22/2026 5:36:28 PM
|
||||
|
||||
Source: time.windows.com,0x8
|
||||
|
||||
Poll Interval: 6 (64s)
|
||||
|
||||
|
||||
|
||||
[OK] ReferenceId: ReferenceId: 0x287706E4 (source IP: 40.119.6.228) (no longer LOCL)
|
||||
|
||||
|
||||
|
||||
========================================================================
|
||||
|
||||
== 2. TLS 1.2 enforcement (.NET + Schannel) - requires reboot
|
||||
|
||||
========================================================================
|
||||
|
||||
[OK] .NET TLS keys set at HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
|
||||
|
||||
[OK] .NET TLS keys set at HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
|
||||
|
||||
[OK] Disabled TLS 1.0 Client
|
||||
|
||||
[OK] Disabled TLS 1.0 Server
|
||||
|
||||
[OK] Disabled TLS 1.1 Client
|
||||
|
||||
[OK] Disabled TLS 1.1 Server
|
||||
|
||||
[OK] Enabled TLS 1.2 Client
|
||||
Reference in New Issue
Block a user