247 lines
12 KiB
Markdown
247 lines
12 KiB
Markdown
# CS-SERVER Entra Connect Readiness Check Result
|
|
|
|
**Run at:** 2026-04-23T00:27:11.103711Z
|
|
**Completed:** 2026-04-23T00:27:31.663891Z
|
|
**Exit code:** 0
|
|
**Command ID:** 83d558be-2a76-416a-b135-1551060ae661
|
|
|
|
---
|
|
|
|
## STDOUT
|
|
|
|
```
|
|
Entra Connect Readiness Check - 2026-04-22 17:26:18 -07:00
|
|
|
|
Host: CS-SERVER
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 1. Operating System
|
|
|
|
============================================================================
|
|
|
|
OS Caption : Microsoft Windows Server 2019 Standard
|
|
|
|
OS Version : 10.0.17763
|
|
|
|
OS Build : 17763
|
|
|
|
Architecture : 64-bit
|
|
|
|
Install Date : 8/4/2024 6:39:38 PM
|
|
|
|
Last Boot : 4/14/2026 8:29:03 PM
|
|
|
|
Uptime (days) : 7.9
|
|
|
|
[OK] Server 2016+ required : Microsoft Windows Server 2019 Standard -> PASS
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 2. .NET Framework version
|
|
|
|
============================================================================
|
|
|
|
.NET Framework version : System.Object[]
|
|
|
|
.NET release key : 528049
|
|
|
|
[OK] .NET 4.7.2+ required : 4.8 4.7.2 4.7.1 4.7 4.6.2 -> PASS
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 3. PowerShell
|
|
|
|
============================================================================
|
|
|
|
PSVersion : 5.1.17763.8510
|
|
|
|
PSEdition : Desktop
|
|
|
|
[OK] PS 5.0+ required : 5.1.17763.8510 -> PASS
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 4. TLS 1.2 configuration
|
|
|
|
============================================================================
|
|
|
|
.NET SchUseStrongCrypto (64-bit) : 1
|
|
|
|
.NET SchUseStrongCrypto (32-bit) :
|
|
|
|
.NET SystemDefaultTlsVersions (64) :
|
|
|
|
.NET SystemDefaultTlsVersions (32) :
|
|
|
|
SCHANNEL TLS 1.0 Client : unset (OS default)
|
|
|
|
SCHANNEL TLS 1.1 Client : unset (OS default)
|
|
|
|
SCHANNEL TLS 1.2 Client : unset (OS default)
|
|
|
|
SCHANNEL TLS 1.0 Server : unset (OS default)
|
|
|
|
SCHANNEL TLS 1.1 Server : unset (OS default)
|
|
|
|
SCHANNEL TLS 1.2 Server : unset (OS default)
|
|
|
|
(Entra Connect requires TLS 1.2 client enabled; TLS 1.0/1.1 should be disabled per HIPAA best practice.)
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 5. Disk space
|
|
|
|
============================================================================
|
|
|
|
Drive C: : 149.4 GB free of 296.9 GB (50.3% free)
|
|
|
|
Drive D: : 548.5 GB free of 1117.2 GB (49.1% free)
|
|
|
|
(Entra Connect needs ~5-20 GB free on install drive, typically C:.)
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 6. AD Domain + FSMO roles
|
|
|
|
============================================================================
|
|
|
|
Domain : cascades.local
|
|
|
|
NetBIOS name : CASCADES
|
|
|
|
Forest mode : Windows2016Forest
|
|
|
|
Domain mode : Windows2016Domain
|
|
|
|
Schema master : CS-SERVER.cascades.local
|
|
|
|
Domain naming master : CS-SERVER.cascades.local
|
|
|
|
PDC emulator : CS-SERVER.cascades.local
|
|
|
|
RID master : CS-SERVER.cascades.local
|
|
|
|
Infrastructure master : CS-SERVER.cascades.local
|
|
|
|
AD user count : 44
|
|
|
|
AD group count : 55
|
|
|
|
AD OU count : 18
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 7. AD Schema version
|
|
|
|
============================================================================
|
|
|
|
Schema objectVersion : 88
|
|
|
|
Schema version (mapped) : Windows Server 2019
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 8. Time sync
|
|
|
|
============================================================================
|
|
|
|
(Entra Connect requires clock within ~5 min of Microsoft time.)
|
|
|
|
Leap Indicator: 0(no warning)
|
|
|
|
Stratum: 1 (primary reference - syncd by radio clock)
|
|
|
|
Precision: -23 (119.209ns per tick)
|
|
|
|
Root Delay: 0.0000000s
|
|
|
|
Root Dispersion: 10.0000000s
|
|
|
|
ReferenceId: 0x4C4F434C (source name: "LOCL")
|
|
|
|
Last Successful Sync Time: 4/21/2026 8:31:32 PM
|
|
|
|
Source: Free-running System Clock
|
|
|
|
Poll Interval: 6 (64s)
|
|
|
|
|
|
|
|
|
|
|
|
#Peers: 1
|
|
|
|
|
|
|
|
Peer:
|
|
|
|
State: Pending
|
|
|
|
Time Remaining: 10209.9342707s
|
|
|
|
Mode: 0 (reserved)
|
|
|
|
Stratum: 0 (unspecified)
|
|
|
|
PeerPoll Interval: 0 (unspecified)
|
|
|
|
HostPoll Interval: 0 (unspecified)
|
|
|
|
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 9. Internet connectivity to Microsoft sync endpoints
|
|
|
|
============================================================================
|
|
|
|
[OK] HTTPS 443 -> login.microsoftonline.com : True
|
|
|
|
[OK] HTTPS 443 -> login.windows.net : True
|
|
|
|
[OK] HTTPS 443 -> secure.aadcdn.microsoftonline-p.com: True
|
|
|
|
[OK] HTTPS 443 -> management.azure.com : True
|
|
|
|
[OK] HTTPS 443 -> graph.windows.net : True
|
|
|
|
[OK] HTTPS 443 -> adminwebservice.microsoftonline.com: True
|
|
|
|
[OK] HTTPS 443 -> provisioningapi.microsoftonline.com: True
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 10. WinHTTP proxy
|
|
|
|
============================================================================
|
|
|
|
|
|
|
|
Current WinHTTP proxy settings:
|
|
|
|
|
|
|
|
Direct access (no proxy server).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 11. Existing Entra Connect / AAD Sync installations
|
|
|
|
============================================================================
|
|
|
|
[OK] Entra Connect / AAD Sync service : Not found (expected)
|
|
|
|
[OK] Azure/Entra installed products : none
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 12. SQL services (LocalDB conflict check)
|
|
|
|
============================================================================
|
|
|
|
MSSQL$MICROSOFT##WID : Running (Windows Internal Database)
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 13. Key services running (potential conflicts / heavy load)
|
|
|
|
============================================================================
|
|
|
|
Service DHCPServer : Running - DHCP Server
|
|
|
|
Service DNS : Running - DNS Server
|
|
|
|
Service NTDS : Running - Active Directory Domain Services
|
|
|
|
Service QBVSS : Running - QBIDPService
|
|
|
|
Service QuickBooksDB34 : Stopped - QuickBooksDB34
|
|
|
|
Service Spooler : Running - Print Spooler
|
|
|
|
Service vmms : Running - Hyper-V Virtual Machine Management
|
|
|
|
Service W3SVC : Running - World Wide Web Publishing Service
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 14. Memory + CPU pressure (current)
|
|
|
|
============================================================================
|
|
|
|
RAM total (GB) : 47.9
|
|
|
|
RAM in use (GB) : 12.8 (27%)
|
|
|
|
RAM free (GB) : 35.1
|
|
|
|
CPU load (avg %) : 1
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 15. Event log health (last 24h)
|
|
|
|
============================================================================
|
|
|
|
System log errors/critical : 3 errors, 0 critical
|
|
|
|
|
|
|
|
Count Name
|
|
|
|
----- ----
|
|
|
|
2 Microsoft-Windows-TPM-WMI
|
|
|
|
1 Microsoft-Windows-DistributedCOM
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Application log errors/critical : 4 errors, 0 critical
|
|
|
|
|
|
|
|
Count Name
|
|
|
|
----- ----
|
|
|
|
2 .NET Runtime
|
|
|
|
1 Firefox Default Browser Agent
|
|
|
|
1 Microsoft-Windows-Security-SPP
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 16. DC health (dcdiag subset)
|
|
|
|
============================================================================
|
|
|
|
--- dcdiag /test:connectivity,fsmocheck,services,advertising /v (trimmed) ---
|
|
|
|
Starting test: Connectivity
|
|
|
|
......................... CS-SERVER passed test Connectivity
|
|
|
|
Starting test: Advertising
|
|
|
|
......................... CS-SERVER passed test Advertising
|
|
|
|
Starting test: Services
|
|
|
|
......................... CS-SERVER passed test Services
|
|
|
|
Starting test: FsmoCheck
|
|
|
|
......................... cascades.local passed test FsmoCheck
|
|
|
|
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 17. Windows Features (Server Backup etc.)
|
|
|
|
============================================================================
|
|
|
|
|
|
|
|
Name InstallState
|
|
|
|
---- ------------
|
|
|
|
RSAT-AD-Tools Installed
|
|
|
|
RSAT-AD-PowerShell Installed
|
|
|
|
Windows-Server-Backup Available
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== 18. Certificate expirations (local cert store, expires < 90d)
|
|
|
|
============================================================================
|
|
|
|
|
|
|
|
Subject
|
|
|
|
-------
|
|
|
|
OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Time Stamping Service Root, OU=Microsoft Corporation, O=Microsoft
|
|
|
|
Trust Network
|
|
|
|
CN=Microsoft Authenticode(tm) Root Authority, O=MSFT, C=US
|
|
|
|
OU="NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.", OU=VeriSign Time Stamping Service Root, OU="VeriSign, Inc.",
|
|
|
|
O=VeriSign Trust Network
|
|
|
|
CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US
|
|
|
|
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US
|
|
|
|
CN=Microsoft Root Authority, OU=Microsoft Corporation, OU=Copyright (c) 1997 Microsoft Corp.
|
|
|
|
CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, S=Western Cape, C=ZA
|
|
|
|
CN=Microsoft Root Certificate Authority, DC=microsoft, DC=com
|
|
|
|
CN=CS-SERVER.cascades.local
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
============================================================================
|
|
|
|
== Done
|
|
|
|
============================================================================
|
|
|
|
Completed at 2026-04-22 17:26:38 -07:00
|
|
|
|
|
|
```
|
|
|
|
## STDERR
|
|
|
|
```
|
|
|
|
```
|