# CS-SERVER Entra Connect Pre-flight Remediation Result

**Command ID:** 1bb38813-57ae-4321-ba81-e8dc7ea4a30d
**Run at:** 2026-04-23T00:37:14.365639Z
**Completed:** 2026-04-23T00:39:04.479126Z
**Exit code:** 0

## STDOUT

```


========================================================================

== 0. Pre-flight snapshot (rollback material)

========================================================================

[OK]   Backup dir: D:\Backups\pre-entra-connect-2026-04-22-1736

[OK]   Registry pre-state exported (.NET + Schannel Protocols)

[OK]   w32tm pre-state captured

[OK]   Event log snapshot saved (200 System events)



To roll back TLS changes after reboot: 
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-64.reg 
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-32.reg 
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\schannel-protocols-pre.reg 
Restart-Computer



========================================================================

== 1. Time sync fix (w32tm) - no reboot

========================================================================

[OK]   Configured w32tm peer list: time.windows.com,0x8 pool.ntp.org,0x8 time.nist.gov,0x8

[OK]   Restarted w32time service

    Leap Indicator: 0(no warning)

    Stratum: 4 (secondary reference - syncd by (S)NTP)

    Precision: -23 (119.209ns per tick)

    Root Delay: 0.0311588s

    Root Dispersion: 61.0046385s

    ReferenceId: 0x287706E4 (source IP:  40.119.6.228)

    Last Successful Sync Time: 4/22/2026 5:36:28 PM

    Source: time.windows.com,0x8 

    Poll Interval: 6 (64s)

    

[OK]   ReferenceId: ReferenceId: 0x287706E4 (source IP:  40.119.6.228) (no longer LOCL)



========================================================================

== 2. TLS 1.2 enforcement (.NET + Schannel) - requires reboot

========================================================================

[OK]   .NET TLS keys set at HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319

[OK]   .NET TLS keys set at HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319

[OK]   Disabled TLS 1.0 Client

[OK]   Disabled TLS 1.0 Server

[OK]   Disabled TLS 1.1 Client

[OK]   Disabled TLS 1.1 Server

[OK]   Enabled TLS 1.2 Client

[OK]   Enabled TLS 1.2 Server



========================================================================

== 3. Install Windows Server Backup feature - no reboot

========================================================================

WARNING: You must restart this server to finish the installation process.
[OK]   Installed Windows-Server-Backup. RestartNeeded: Yes



========================================================================

== 4. Schedule reboot for 18:00 local

========================================================================

Current time: 04/22/2026 17:38:59

Target reboot: 04/22/2026 18:00:00

Delay: 1261 seconds (21 minutes)

[OK]   Reboot scheduled for 04/22/2026 18:00:00 (in 1261 sec). Cancel with: shutdown /a



========================================================================

== 5. Summary

========================================================================

Backup/rollback dir: D:\Backups\pre-entra-connect-2026-04-22-1736

Reboot scheduled:   04/22/2026 18:00:00

Cancel reboot:       shutdown /a



Post-reboot verification:

  1. w32tm /query /status  - confirm ReferenceId is no longer LOCL

  2. nltest /dsgetdc:cascades.local  - confirm DC is responding

  3. Re-run entra-connect-readiness.ps1 for full pass/fail sweep



Completed at 04/22/2026 17:38:59


```

## STDERR

```

```