Entra ID Connect Health
Azure AD Connect Health and Synchronization Status
What it does
Monitors Azure AD Connect synchronization health, sync status, errors, and configuration. Primary: Queries Microsoft Graph API (beta/directory/onPremisesSynchronization) so this works from any machine with Graph access. Fallback: Queries the local ADSync PowerShell module and Windows Event Logs when running directly on the AAD Connect server. Migration-useful CSV enrichment (v2.2): - Stable ids: ObjectId, TenantId, AppId, domain name anchors - Names: TenantDisplayName, DisplayName, Component, verified domain names - Relationships: TenantId parent on domains/SPs/summary; ParentAnchorID - Timestamps: CreatedDateTime (SP), SampleOnPremisesLastSyncDateTime (hybrid sample) - Hybrid footprint: synced user/group/device counts, domain auth type (Managed/Federated) Honest EMPTY when tenant has no hybrid/sync assets. Fail loud on AUTH (401/403).
How the app exposes it
The module feeds into the ACQI app's dedicated results view. From there, conflicts, dependencies, and readiness scores roll up into the deal workspace.
/discovered/aad-connect-health Outputs
Each module produces a CSV with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact columns vary by module — the app's results view shows the live schema.