Howard Enos
af4ad0aea3
CS-SERVER post-reboot verification: time sync, TLS 1.2 enforcement, and Windows Server Backup feature all persisted cleanly. dcdiag clean. Ready for Entra Connect install. Synology cascadesDS permission inventory captured via DSM API (SSH disabled by default on Synology). 35 users, 4 groups, 10 shares. Analysis identifies 7 shared-account role logins (HIPAA violation), 8 departed-employee accounts to clean up, and 4 shares needing Meredith-side confirmation before migration (pacs most sensitive). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
12 KiB
12 KiB
CS-SERVER Entra Connect Readiness Check - POST-REBOOT
Command ID: fe50258c-4005-4b1a-b559-106023df5d6a Run at: 2026-04-23T01:54:13.869657Z Completed: 2026-04-23T01:55:27.360715Z Exit code: 0
STDOUT
Entra Connect Readiness Check - 2026-04-22 18:54:22 -07:00
Host: CS-SERVER
============================================================================
== 1. Operating System
============================================================================
OS Caption : Microsoft Windows Server 2019 Standard
OS Version : 10.0.17763
OS Build : 17763
Architecture : 64-bit
Install Date : 8/4/2024 6:39:38 PM
Last Boot : 4/22/2026 6:29:20 PM
Uptime (days) : 0
[OK] Server 2016+ required : Microsoft Windows Server 2019 Standard -> PASS
============================================================================
== 2. .NET Framework version
============================================================================
.NET Framework version : System.Object[]
.NET release key : 528049
[OK] .NET 4.7.2+ required : 4.8 4.7.2 4.7.1 4.7 4.6.2 -> PASS
============================================================================
== 3. PowerShell
============================================================================
PSVersion : 5.1.17763.8641
PSEdition : Desktop
[OK] PS 5.0+ required : 5.1.17763.8641 -> PASS
============================================================================
== 4. TLS 1.2 configuration
============================================================================
.NET SchUseStrongCrypto (64-bit) : 1
.NET SchUseStrongCrypto (32-bit) : 1
.NET SystemDefaultTlsVersions (64) : 1
.NET SystemDefaultTlsVersions (32) : 1
SCHANNEL TLS 1.0 Client : Enabled=0 DisabledByDefault=1
SCHANNEL TLS 1.1 Client : Enabled=0 DisabledByDefault=1
SCHANNEL TLS 1.2 Client : Enabled=1 DisabledByDefault=0
SCHANNEL TLS 1.0 Server : Enabled=0 DisabledByDefault=1
SCHANNEL TLS 1.1 Server : Enabled=0 DisabledByDefault=1
SCHANNEL TLS 1.2 Server : Enabled=1 DisabledByDefault=0
(Entra Connect requires TLS 1.2 client enabled; TLS 1.0/1.1 should be disabled per HIPAA best practice.)
============================================================================
== 5. Disk space
============================================================================
Drive C: : 149.3 GB free of 296.9 GB (50.3% free)
Drive D: : 548.5 GB free of 1117.2 GB (49.1% free)
(Entra Connect needs ~5-20 GB free on install drive, typically C:.)
============================================================================
== 6. AD Domain + FSMO roles
============================================================================
Domain : cascades.local
NetBIOS name : CASCADES
Forest mode : Windows2016Forest
Domain mode : Windows2016Domain
Schema master : CS-SERVER.cascades.local
Domain naming master : CS-SERVER.cascades.local
PDC emulator : CS-SERVER.cascades.local
RID master : CS-SERVER.cascades.local
Infrastructure master : CS-SERVER.cascades.local
AD user count : 44
AD group count : 55
AD OU count : 18
============================================================================
== 7. AD Schema version
============================================================================
Schema objectVersion : 88
Schema version (mapped) : Windows Server 2019
============================================================================
== 8. Time sync
============================================================================
(Entra Connect requires clock within ~5 min of Microsoft time.)
Leap Indicator: 0(no warning)
Stratum: 2 (secondary reference - syncd by (S)NTP)
Precision: -23 (119.209ns per tick)
Root Delay: 0.0470007s
Root Dispersion: 0.0759468s
ReferenceId: 0x84A36103 (source IP: 132.163.97.3)
Last Successful Sync Time: 4/22/2026 6:53:55 PM
Source: time.nist.gov,0x8
Poll Interval: 8 (256s)
#Peers: 3
Peer: pool.ntp.org,0x8
State: Active
Time Remaining: 74.4687716s
Mode: 3 (Client)
Stratum: 2 (secondary reference - syncd by (S)NTP)
PeerPoll Interval: 8 (256s)
HostPoll Interval: 8 (256s)
Peer: time.windows.com,0x8
State: Active
Time Remaining: 202.5990796s
Mode: 3 (Client)
Stratum: 3 (secondary reference - syncd by (S)NTP)
PeerPoll Interval: 8 (256s)
HostPoll Interval: 8 (256s)
Peer: time.nist.gov,0x8
State: Active
Time Remaining: 203.5668662s
Mode: 3 (Client)
Stratum: 1 (primary reference - syncd by radio clock)
PeerPoll Interval: 13 (8192s)
HostPoll Interval: 8 (256s)
============================================================================
== 9. Internet connectivity to Microsoft sync endpoints
============================================================================
[OK] HTTPS 443 -> login.microsoftonline.com : True
[OK] HTTPS 443 -> login.windows.net : True
[OK] HTTPS 443 -> secure.aadcdn.microsoftonline-p.com: True
[OK] HTTPS 443 -> management.azure.com : True
[OK] HTTPS 443 -> graph.windows.net : True
[OK] HTTPS 443 -> adminwebservice.microsoftonline.com: True
[OK] HTTPS 443 -> provisioningapi.microsoftonline.com: True
============================================================================
== 10. WinHTTP proxy
============================================================================
Current WinHTTP proxy settings:
Direct access (no proxy server).
============================================================================
== 11. Existing Entra Connect / AAD Sync installations
============================================================================
[OK] Entra Connect / AAD Sync service : Not found (expected)
[OK] Azure/Entra installed products : none
============================================================================
== 12. SQL services (LocalDB conflict check)
============================================================================
MSSQL$MICROSOFT##WID : Running (Windows Internal Database)
============================================================================
== 13. Key services running (potential conflicts / heavy load)
============================================================================
Service DHCPServer : Running - DHCP Server
Service DNS : Running - DNS Server
Service NTDS : Running - Active Directory Domain Services
Service QBVSS : Running - QBIDPService
Service QuickBooksDB34 : Running - QuickBooksDB34
Service Spooler : Running - Print Spooler
Service vmms : Running - Hyper-V Virtual Machine Management
Service W3SVC : Running - World Wide Web Publishing Service
============================================================================
== 14. Memory + CPU pressure (current)
============================================================================
RAM total (GB) : 47.9
RAM in use (GB) : 7.9 (16%)
RAM free (GB) : 40
CPU load (avg %) : 22
============================================================================
== 15. Event log health (last 24h)
============================================================================
System log errors/critical : 19 errors, 0 critical
Count Name
----- ----
6 Microsoft-Windows-Hyper-V-VmSwitch
4 Service Control Manager
4 Schannel
3 Microsoft-Windows-DistributedCOM
2 Microsoft-Windows-TPM-WMI
Application log errors/critical : 15 errors, 0 critical
Count Name
----- ----
6 VSS
4 Microsoft-Windows-Security-SPP
2 .NET Runtime
2 Microsoft-Windows-Perflib
1 Firefox Default Browser Agent
============================================================================
== 16. DC health (dcdiag subset)
============================================================================
--- dcdiag /test:connectivity,fsmocheck,services,advertising /v (trimmed) ---
Starting test: Connectivity
......................... CS-SERVER passed test Connectivity
Starting test: Advertising
......................... CS-SERVER passed test Advertising
Starting test: Services
......................... CS-SERVER passed test Services
Starting test: FsmoCheck
......................... cascades.local passed test FsmoCheck
============================================================================
== 17. Windows Features (Server Backup etc.)
============================================================================
Name InstallState
---- ------------
RSAT-AD-Tools Installed
RSAT-AD-PowerShell Installed
Windows-Server-Backup Installed
============================================================================
== 18. Certificate expirations (local cert store, expires < 90d)
============================================================================
Subject
-------
OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Time Stamping Service Root, OU=Microsoft Corporation, O=Microsoft
Trust Network
CN=Microsoft Authenticode(tm) Root Authority, O=MSFT, C=US
OU="NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.", OU=VeriSign Time Stamping Service Root, OU="VeriSign, Inc.",
O=VeriSign Trust Network
CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US
CN=Microsoft Root Authority, OU=Microsoft Corporation, OU=Copyright (c) 1997 Microsoft Corp.
CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, S=Western Cape, C=ZA
CN=Microsoft Root Certificate Authority, DC=microsoft, DC=com
CN=CS-SERVER.cascades.local
============================================================================
== Done
============================================================================
Completed at 2026-04-22 18:55:27 -07:00