What gets checked
- AD, Microsoft Entra ID, sync health, domains, UPNs, users, groups, devices, admin roles, and authentication state
- Hybrid identity readiness, Entra Connect or Cloud Sync health, duplicate identities, and migration blockers
- Legacy application, device join, service account, and third-party dependencies where disclosed