AADConnectHealth
Azure AD Connect Health and Synchronization Status Discovery Module
What it does
Monitors Azure AD Connect synchronization health, sync status, errors, and configuration. Primary: Queries Microsoft Graph API (beta/directory/onPremisesSynchronization) so this works from any machine with Graph access. Fallback: Queries the local ADSync PowerShell module and Windows Event Logs when running directly on the AAD Connect server. Migration-useful CSV enrichment (v2.2): - Stable ids: ObjectId, TenantId, AppId, domain name anchors - Names: TenantDisplayName, DisplayName, Component, verified domain names - Relationships: TenantId parent on domains/SPs/summary; ParentAnchorID - Timestamps: CreatedDateTime (SP), SampleOnPremisesLastSyncDateTime (hybrid sample) - Hybrid footprint: synced user/group/device counts, domain auth type (Managed/Federated) Honest EMPTY when tenant has no hybrid/sync assets. Fail loud on AUTH (401/403).
How the app exposes it
The module runs through the ACQI discovery orchestrator and writes its rows into a dedicated results view. From there, conflicts, dependencies, and readiness scores feed the deal-wide consolidation layer.
/discovered/aad-connect-health Outputs
Each module emits a normalised CSV keyed by entity ID with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact column set varies by module — the app's results view shows the live schema.