90 lines
3.6 KiB
Markdown
90 lines
3.6 KiB
Markdown
# CS-SERVER Entra Connect Pre-flight Remediation Result
|
|
|
|
**Command ID:** 1bb38813-57ae-4321-ba81-e8dc7ea4a30d
|
|
**Run at:** 2026-04-23T00:37:14.365639Z
|
|
**Completed:** 2026-04-23T00:39:04.479126Z
|
|
**Exit code:** 0
|
|
|
|
## STDOUT
|
|
|
|
```
|
|
|
|
|
|
========================================================================
|
|
|
|
== 0. Pre-flight snapshot (rollback material)
|
|
|
|
========================================================================
|
|
|
|
[OK] Backup dir: D:\Backups\pre-entra-connect-2026-04-22-1736
|
|
|
|
[OK] Registry pre-state exported (.NET + Schannel Protocols)
|
|
|
|
[OK] w32tm pre-state captured
|
|
|
|
[OK] Event log snapshot saved (200 System events)
|
|
|
|
|
|
|
|
To roll back TLS changes after reboot:
|
|
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-64.reg
|
|
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\dotnet-32.reg
|
|
reg import D:\Backups\pre-entra-connect-2026-04-22-1736\schannel-protocols-pre.reg
|
|
Restart-Computer
|
|
|
|
|
|
|
|
========================================================================
|
|
|
|
== 1. Time sync fix (w32tm) - no reboot
|
|
|
|
========================================================================
|
|
|
|
[OK] Configured w32tm peer list: time.windows.com,0x8 pool.ntp.org,0x8 time.nist.gov,0x8
|
|
|
|
[OK] Restarted w32time service
|
|
|
|
Leap Indicator: 0(no warning)
|
|
|
|
Stratum: 4 (secondary reference - syncd by (S)NTP)
|
|
|
|
Precision: -23 (119.209ns per tick)
|
|
|
|
Root Delay: 0.0311588s
|
|
|
|
Root Dispersion: 61.0046385s
|
|
|
|
ReferenceId: 0x287706E4 (source IP: 40.119.6.228)
|
|
|
|
Last Successful Sync Time: 4/22/2026 5:36:28 PM
|
|
|
|
Source: time.windows.com,0x8
|
|
|
|
Poll Interval: 6 (64s)
|
|
|
|
|
|
|
|
[OK] ReferenceId: ReferenceId: 0x287706E4 (source IP: 40.119.6.228) (no longer LOCL)
|
|
|
|
|
|
|
|
========================================================================
|
|
|
|
== 2. TLS 1.2 enforcement (.NET + Schannel) - requires reboot
|
|
|
|
========================================================================
|
|
|
|
[OK] .NET TLS keys set at HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
|
|
|
|
[OK] .NET TLS keys set at HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
|
|
|
|
[OK] Disabled TLS 1.0 Client
|
|
|
|
[OK] Disabled TLS 1.0 Server
|
|
|
|
[OK] Disabled TLS 1.1 Client
|
|
|
|
[OK] Disabled TLS 1.1 Server
|
|
|
|
[OK] Enabled TLS 1.2 Client
|
|
|
|
[OK] Enabled TLS 1.2 Server
|
|
|
|
|
|
|
|
========================================================================
|
|
|
|
== 3. Install Windows Server Backup feature - no reboot
|
|
|
|
========================================================================
|
|
|
|
WARNING: You must restart this server to finish the installation process.
|
|
[OK] Installed Windows-Server-Backup. RestartNeeded: Yes
|
|
|
|
|
|
|
|
========================================================================
|
|
|
|
== 4. Schedule reboot for 18:00 local
|
|
|
|
========================================================================
|
|
|
|
Current time: 04/22/2026 17:38:59
|
|
|
|
Target reboot: 04/22/2026 18:00:00
|
|
|
|
Delay: 1261 seconds (21 minutes)
|
|
|
|
[OK] Reboot scheduled for 04/22/2026 18:00:00 (in 1261 sec). Cancel with: shutdown /a
|
|
|
|
|
|
|
|
========================================================================
|
|
|
|
== 5. Summary
|
|
|
|
========================================================================
|
|
|
|
Backup/rollback dir: D:\Backups\pre-entra-connect-2026-04-22-1736
|
|
|
|
Reboot scheduled: 04/22/2026 18:00:00
|
|
|
|
Cancel reboot: shutdown /a
|
|
|
|
|
|
|
|
Post-reboot verification:
|
|
|
|
1. w32tm /query /status - confirm ReferenceId is no longer LOCL
|
|
|
|
2. nltest /dsgetdc:cascades.local - confirm DC is responding
|
|
|
|
3. Re-run entra-connect-readiness.ps1 for full pass/fail sweep
|
|
|
|
|
|
|
|
Completed at 04/22/2026 17:38:59
|
|
|
|
|
|
```
|
|
|
|
## STDERR
|
|
|
|
```
|
|
|
|
```
|