Entra ID Connect health alerts interpretation
Published Feb 12, 2024
•
Updated May 1, 2026
Overview
Connect Health surfaces sync and ADFS issues early—if ignored, provisioning breaks silently.
Alerts to prioritize
- Duplicate attribute resolutions pending.
- LDAP search or export failures.
- Password hash sync stopped.
Triage steps
- Open Health portal → machine → specific alert article link.
- Correlate with Event Viewer on sync server or ADFS farm.
- Verify service account password rotation didn’t break delegation.
Hygiene
Patch sync servers monthly; maintain staging mode discipline for rule changes.
Client comms
If sync delayed > SLA, notify app owners waiting for group membership updates.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
security-endpoint-protection
msp
+1
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
security-endpoint-protection
msp
+1
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...
security-endpoint-protection
msp
+1