3.6 KiB
3.6 KiB
CS-SERVER Entra Connect Pre-flight Remediation Result
Command ID: 1bb38813-57ae-4321-ba81-e8dc7ea4a30d Run at: 2026-04-23T00:37:14.365639Z Completed: 2026-04-23T00:39:04.479126Z Exit code: 0
STDOUT
========================================================================
== 0. Pre-flight snapshot (rollback material)
========================================================================
[OK] Backup dir: D:\Backups\pre-entra-connect-2026-04-22-1736
[OK] Registry pre-state exported (.NET + Schannel Protocols)
[OK] w32tm pre-state captured
[OK] Event log snapshot saved (200 System events)
To roll back TLS changes after reboot:
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-64.reg
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-32.reg
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\schannel-protocols-pre.reg
Restart-Computer
========================================================================
== 1. Time sync fix (w32tm) - no reboot
========================================================================
[OK] Configured w32tm peer list: time.windows.com,0x8 pool.ntp.org,0x8 time.nist.gov,0x8
[OK] Restarted w32time service
Leap Indicator: 0(no warning)
Stratum: 4 (secondary reference - syncd by (S)NTP)
Precision: -23 (119.209ns per tick)
Root Delay: 0.0311588s
Root Dispersion: 61.0046385s
ReferenceId: 0x287706E4 (source IP: 40.119.6.228)
Last Successful Sync Time: 4/22/2026 5:36:28 PM
Source: time.windows.com,0x8
Poll Interval: 6 (64s)
[OK] ReferenceId: ReferenceId: 0x287706E4 (source IP: 40.119.6.228) (no longer LOCL)
========================================================================
== 2. TLS 1.2 enforcement (.NET + Schannel) - requires reboot
========================================================================
[OK] .NET TLS keys set at HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
[OK] .NET TLS keys set at HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
[OK] Disabled TLS 1.0 Client
[OK] Disabled TLS 1.0 Server
[OK] Disabled TLS 1.1 Client
[OK] Disabled TLS 1.1 Server
[OK] Enabled TLS 1.2 Client
[OK] Enabled TLS 1.2 Server
========================================================================
== 3. Install Windows Server Backup feature - no reboot
========================================================================
WARNING: You must restart this server to finish the installation process.
[OK] Installed Windows-Server-Backup. RestartNeeded: Yes
========================================================================
== 4. Schedule reboot for 18:00 local
========================================================================
Current time: 04/22/2026 17:38:59
Target reboot: 04/22/2026 18:00:00
Delay: 1261 seconds (21 minutes)
[OK] Reboot scheduled for 04/22/2026 18:00:00 (in 1261 sec). Cancel with: shutdown /a
========================================================================
== 5. Summary
========================================================================
Backup/rollback dir: D:\Backups\pre-entra-connect-2026-04-22-1736
Reboot scheduled: 04/22/2026 18:00:00
Cancel reboot: shutdown /a
Post-reboot verification:
1. w32tm /query /status - confirm ReferenceId is no longer LOCL
2. nltest /dsgetdc:cascades.local - confirm DC is responding
3. Re-run entra-connect-readiness.ps1 for full pass/fail sweep
Completed at 04/22/2026 17:38:59
STDERR