ADSyncTools

1.5.2

Bin/ADSyncDiagnostics/PSScripts/ADSyncDiagnostics.ps1

#-------------------------------------------------------------------------
# Copyright (c) Microsoft Corporation. All rights reserved.
#-------------------------------------------------------------------------

#
# Event IDs
#
Set-Variable -Option Constant -Scope script -Name EventIdDiagnosticsReportRun  -Value 3001
Set-Variable -Option Constant -Scope script -Name EventIdDiagnosticsReportEnd  -Value 3002
Set-Variable -Option Constant -Scope script -Name EventIdDiagnosticsReportFail -Value 3003

#
# Event Messages
#
Set-Variable -Option Constant -Scope script -Name EventMsgDiagnosticsReportRun  -Value "`r`nData collection has been started."
Set-Variable -Option Constant -Scope script -Name EventMsgDiagnosticsReportEnd  -Value "`r`nData collection finished successfully. `r`n{0}"
Set-Variable -Option Constant -Scope script -Name EventMsgDiagnosticsReportFail -Value "`r`nData collection terminated with an error. `r`n{0}"


#-------------------------------------------------------------------------
#
# Helper functions to run AADConnect Diagnostics Report.
#
#-------------------------------------------------------------------------

#
# Outputs Windows Server OS information
#
Function Get-ADSyncDiagsServerOS
{
    $adSyncServername = $env:computername
    $adSyncOS = Get-WmiObject -class Win32_OperatingSystem -computername $adSyncServername

    $adSyncOSa = @()
    $row = "" | select ComputerName,Description,Caption,Version,BuildNumber,ServicePackMinorVersion,ServicePackMajorVersion,OSLanguage,OSArchitecture,Locale,CodeSet,LastBootUpTime,InstallDate
    $row.ComputerName = $adSyncServername
    $row.Description = $adSyncOS.Description
    $row.Caption = $adSyncOS.Caption
    $row.Version = $adSyncOS.Version
    $row.BuildNumber = $adSyncOS.BuildNumber
    $row.ServicePackMinorVersion = $adSyncOS.ServicePackMinorVersion
    $row.ServicePackMajorVersion = $adSyncOS.ServicePackMajorVersion
    $row.OSArchitecture = $adSyncOS.OSArchitecture
    $row.OSLanguage = $adSyncOS.OSLanguage
    $row.Locale = $adSyncOS.Locale
    $row.CodeSet = $adSyncOS.CodeSet
    $row.LastBootUpTime = $adSyncOS.LastBootUpTime
    $row.InstallDate = $adSyncOS.InstallDate
    $adSyncOSa += $row

    return $adSyncOSa
}

#-------------------------------------------------------------------------
#
# Helper function to initialize AADConnect Diagnostics Report.
#
#-------------------------------------------------------------------------
Function Initialize-ADSyncDiagnosticsPath
{
    param
    (
        [parameter(mandatory=$true)]
        $OutputPath
    )

    if (-not $(Test-Path $OutputPath))
    {
        try 
        {
            $resultFolder = mkdir -Path $OutputPath -ErrorAction Stop
            return $true
        }
        catch       
        {
            $resultMsg = "An error occurred while creating the folder $OutputPath for AADConnect Diagnostics: $($_.Exception.Message)"
            WriteEventLog($EventIdDiagnosticsReportFail)($EventMsgDiagnosticsReportFail -f $resultMsg)
            Write-Error $resultMsg
            return $false
        }
    }
    else
    {
        return $true
    }
}

Function Initialize-ADSyncDiagnosticsText
{
    $Global:ADSyncDiagsTextReport = $null

    $culture = New-Object System.Globalization.CultureInfo 'en-us'
    $dateLocal = $((Get-Date).DateTime).ToString($culture)
    $date = $((Get-Date).ToUniversalTime()).ToString($culture)
    $Global:ADSyncDiagsTextReport = "AAD Connect Diagnostics`r`n"
    $Global:ADSyncDiagsTextReport += "$date (UTC)`r`n"
    $Global:ADSyncDiagsTextReport += "$dateLocal (Local)`r`n"
    $Global:ADSyncDiagsTextReport += "`r`n`r`n`r`n"
}

Function Initialize-ADSyncDiagnosticsHtml
{
    $Global:ADSyncDiagsHtmlReport = $null   
    $Global:ADSyncDiagsHtmlReport = @"
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>AAD Connect Diagnostics Report</title>
<style>
p{ line-height: 1em; }
h1, h2, h3, h4{
    color: DodgerBlue;
    font-weight: normal;
    line-height: 1.1em;
    margin: 0 0 .5em 0;
}
h1{ font-size: 1.7em; }
h2{ font-size: 1.5em; }
a{
    color: black;
    text-decoration: none;
}
    a:hover,
    a:active{ text-decoration: underline; }
body{
    font-family: arial; font-size: 80%; line-height: 1.2em; width: 100%; margin: 0; background: white;
}
</style>
</head><body>
"@
    $dateUTC = [string] "$((Get-Date).ToUniversalTime().DateTime) (UTC)"
    $dateLocal = [string] "$((Get-Date).DateTime) (Local)"
    $Global:ADSyncDiagsHtmlReport += "<H1>AAD Connect Diagnostics on $($env:computername)</H1>"
    $Global:ADSyncDiagsHtmlReport += "<p>$dateLocal</p>"
    $Global:ADSyncDiagsHtmlReport += "<p>$dateUTC </p>"
}

#-------------------------------------------------------------------------
#
# Helper function to extend content of AADConnect Diagnostics Report.
#
#-------------------------------------------------------------------------
Function Add-ADSyncDiagnosticsText
{
    param
    (
        [parameter(mandatory=$false)]
        $Title,
        [parameter(mandatory=$false)]
        $AppendObject
    )

    if ($Title -ne $null)
    {
        $Global:ADSyncDiagsTextReport += "----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------" 
        $Global:ADSyncDiagsTextReport += "`r`n"
        $Global:ADSyncDiagsTextReport += $Title
        $Global:ADSyncDiagsTextReport += "`r`n"
        $Global:ADSyncDiagsTextReport += "----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------"
        $Global:ADSyncDiagsTextReport += "`r`n"
    }
    
    if ($AppendObject -ne $null)
    {
        $Global:ADSyncDiagsTextReport += $AppendObject | Out-String
    }
}

Function Add-ADSyncDiagnosticsHtml
{
    param(
        [parameter(mandatory=$false)]
        $Title,
        [parameter(mandatory=$false)]
        $HeadingSize="H2",
        [parameter(mandatory=$false)]
        $AppendObject,
        [ValidateSet("List","Table","String")]
        $Format="Table"
    )
    
    if ($Title -ne $null)  
    {
        $Global:ADSyncDiagsHtmlReport += "<$HeadingSize>$Title</$HeadingSize>`r`n"
    }
    
    if ($AppendObject -ne "")
    {
        if ($Format -like "String")  
        {
            $Global:ADSyncDiagsHtmlReport += "<p>$AppendObject</p>`r`n"
        }
        else  
        {
            $Global:ADSyncDiagsHtmlReport += $AppendObject | ConvertTo-Html -Fragment -As $Format
        }
        $Global:ADSyncDiagsHtmlReport += "<p></p>`r`n"
    }
} 

#-------------------------------------------------------------------------
#
# Helper function to export AADConnect Diagnostics Report into a file.
#
#-------------------------------------------------------------------------
Function Export-ADSyncDiagnosticsText
{
    param
    (
        [parameter(mandatory=$true)]
        $Title,
        [parameter(mandatory=$true)]
        $ReportDate,
        [parameter(mandatory=$true)]
        $OutputPath
    )

    $filename = "$OutputPath\$($ReportDate)_$Title.log"
    try 
    {
        $Global:ADSyncDiagsTextReport | Out-String | Out-File -FilePath $filename -ErrorAction Stop

        $resultMsg = "AAD Connect Diagnostics Text Report is available at: `n$filename `n" 
        $resultMsg | Write-Host -ForegroundColor Green
    }
    catch  
    {
        $resultMsg = "An error occurred while exporting AADConnect Diagnostics to $filename : $($_.Exception.Message)"
        WriteEventLog($EventIdDiagnosticsReportFail)($EventMsgDiagnosticsReportFail -f $resultMsg)
        Write-Error $resultMsg
    }

    return  $resultMsg
}

Function Export-ADSyncDiagnosticsHtml
{
    param
    (
        [parameter(mandatory=$true)]
        $Title,
        [parameter(mandatory=$true)]
        $ReportDate,
        [parameter(mandatory=$true)]
        $OutputPath
    )
    
    $filename = "$OutputPath\$($ReportDate)_$Title.html"
    
    if ($Global:ADSyncDiagsHtmlReport -ne $null)  
    {
        $Global:ADSyncDiagsHtmlReport += "</body></html>"        
        try 
        {
            $Global:ADSyncDiagsHtmlReport  | Out-String | Out-File -FilePath $filename -ErrorAction Stop
            $resultMsg = "AAD Connect Diagnostics HTML Report is available at: `n$filename `n" 
            $resultMsg | Write-Host -ForegroundColor Green

            "Opening the html report in Internet Explorer..." | Write-Host -fore White
            Write-Host "`r`n"
    
            try
            {
                #
                # Add 'Microsoft.VisualBasic' namespace into PowerShell session.
                #
                Add-Type -AssemblyName "Microsoft.VisualBasic"
        
                $internetExplorer = New-Object -com internetexplorer.application

                $internetExplorer.navigate2($filename)
                $internetExplorer.visible = $true

                if ($internetExplorer.Busy)
                {
                    Sleep -Seconds 15
                }

                $ieProcess = Get-Process | ? { $_.MainWindowHandle -eq $internetExplorer.HWND }

                #
                # Set focus to Internet Explorer so that it will appear on top of other windows.
                #
                [Microsoft.VisualBasic.Interaction]::AppActivate($ieProcess.Id)
            }
            catch
            {
                Write-Error "Unable to open Internet Explorer : $($_.Exception.Message)"
                Write-Host "`r`n"
            }
        }
        catch   
        {
             $resultMsg = "An error occurred while exporting AADConnect Diagnostics to $filename : $($_.Exception.Message)"
             WriteEventLog($EventIdDiagnosticsReportFail)($EventMsgDiagnosticsReportFail -f $resultMsg)
             Write-Error $resultMsg
        }
    }

    return $resultMsg
}

Function Compress-ADSyncDiagnostics
{
    param
    (
        [parameter(mandatory=$true)]
        $Title,
        [parameter(mandatory=$true)]
        $ReportDate,
        [parameter(mandatory=$true)]
        $SourcePath,
        [parameter(mandatory=$true)]
        $OutputPath
    )
    $filename = [string] "$OutputPath\$ReportDate" + "_ADSyncDiagnosticsReport.zip"
    $tempFolder = [string] "$env:temp\$ReportDate" + "_ADSyncDiagnosticsReport"

    # Copy all logs to %Temp% because current 'C:\ProgramData\AADConnect\trace-yyyymmdd-hhmmss.log' is being used by another process
    try  
    {
        Copy-Item $SourcePath $tempFolder -Recurse -ErrorAction Stop
    }
    catch   
    {
        $resultMsg = "Unable to compress AAD Connect Diagnostics information to $filename : $($_.Exception.Message)"
        WriteEventLog($EventIdDiagnosticsReportFail)($EventMsgDiagnosticsReportFail -f $resultMsg)
        Write-Error $resultMsg
        return $resultMsg
    }    

    # Compress AAD Connect Diagnostics folder
    try  
    {
        Add-Type -AssemblyName "System.io.Compression.Filesystem"
        [io.Compression.Zipfile]::CreateFromDirectory($tempFolder, $filename)
        
        $resultMsg = "AADConnect Diagnostics compressed data is available at: `n$filename `n" 
        $resultMsg | Write-Host -ForegroundColor Green
    }
    catch   
    {
        $resultMsg = "Unable to compress AAD Connect Diagnostics information to $filename : $($_.Exception.Message)"
        WriteEventLog($EventIdDiagnosticsReportFail)($EventMsgDiagnosticsReportFail -f $resultMsg)
        Write-Error $resultMsg
    }
    Remove-Item -Path $tempFolder -Recurse -Force
    return $resultMsg
}



#-------------------------------------------------------------------------
#
# Generates a report of AAD Connect Diagnostics including:
# 1- AAD Company Features / Tenant Configuration
# 2- AADConnect Global Settings
# 3- Per Connector Password Hash Sync Status
# 4- Sync Scheduler Settings and Latest Run
#
#-------------------------------------------------------------------------
Function Export-ADSyncDiagnosticsReport 
{
    param
    (
        [parameter(mandatory=$true)]
        $OutputPath 
    )

    $culture = New-Object System.Globalization.CultureInfo 'en-us'
    $reportDate = $(Get-Date -Format yyyyMMdd-HHmmss).ToString($culture)
    $reportFolder = [string] $reportDate + "_ADSyncDiagnosticsReport"
    
    if (-not (Initialize-ADSyncDiagnosticsPath $OutputPath))
    {
        return
    }

    if (-not (Initialize-ADSyncDiagnosticsPath $("$OutputPath\$reportFolder")))
    {
        return
    }

    WriteEventLog($EventIdDiagnosticsReportRun)($EventMsgDiagnosticsReportRun)
    Write-Host "Collecting AAD Connect Diagnostics Information..."
    Write-Host "`r`n"

    Initialize-ADSyncDiagnosticsText
    Initialize-ADSyncDiagnosticsHtml

    # Get Connectors
    $connectors     = Get-ADSyncConnector
    $aadConnectors  = $connectors | Where-Object {$_.SubType -eq "Windows Azure Active Directory (Microsoft)"}
    $adConnectors   = $connectors | Where-Object {$_.ConnectorTypeName -eq "AD"}

    if ($aadConnectors -ne $null -and $adConnectors -ne $null)
    {
        if ($aadConnectors.Count -eq 1)
        {
            # AAD Company Features / Tenant Configuration
            $aadFeatures = Get-ADSyncAADCompanyFeature
            $aadFeaturesPasswordHashSync = $aadFeatures.PasswordHashSync
            Add-ADSyncDiagnosticsText -Title "Azure AD Tenant - Settings" -AppendObject $($aadFeatures | fl)
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Tenant - Settings" -AppendObject $aadFeatures -Format List

            # AADConnect Global Settings
            $globalSettings = Get-ADSyncGlobalSettingsParameter | Select Name,Value | Sort Name
            $globalSettingsPasswordHashSync = [bool] ($globalSettings | Where-Object {$_.Name -eq "Microsoft.OptionalFeature.PasswordHashSync"}).Value
            
            $globalSettings | % { $globalSettingsHt = [ordered]@{} } { $globalSettingsHt[$_.Name] = $_.Value } # Convert to Hashtable
            $globalSettingsObj =  New-Object PSObject -Property $($globalSettingsHt) # Convert to PSObject
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Global Settings" -AppendObject $($globalSettingsObj | fl)
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Global Settings" -AppendObject $globalSettingsObj -Format List

            # Sync Scheduler Settings
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect Sync Scheduler - Settings"
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect Sync Scheduler - Settings"

            $syncSchedulerConfig = Get-ADSyncScheduler
            Add-ADSyncDiagnosticsText -AppendObject $($syncSchedulerConfig | fl)
            Add-ADSyncDiagnosticsHtml -AppendObject $syncSchedulerConfig -Format List

            # Sync Scheduler Last Run
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect Sync Scheduler - Last Run"
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect Sync Scheduler - Last Run"

            $syncSchedulerLastRunObj = New-Object PSObject -Property @{
                TimeGenerated   = "N/A"
                MachineName     = "N/A"
                EventID         = "N/A"
                EntryType       = "N/A"
                Source          = "N/A"
                Message         = "N/A"
            }

            $syncSchedulerEvents = Get-EventLog -LogName Application -Source "Directory Synchronization" -InstanceId 904 -After (Get-Date).AddHours(-3) -ErrorAction SilentlyContinue |
                                   where  {$_.Message -like "Scheduler::SchedulerThreadMain : Started*"} |
                                   select TimeGenerated, MachineName, EventID, EntryType, Source, Message -First 1

            if ($syncSchedulerEvents -ne $null)
            {
                $syncSchedulerLastRunObj = $syncSchedulerEvents
            }
            Add-ADSyncDiagnosticsText -AppendObject $($syncSchedulerLastRunObj | fl)
            Add-ADSyncDiagnosticsHtml -AppendObject $syncSchedulerLastRunObj -Format List


            # AAD Connect Connectors List
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Connectors"
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Connectors"
            $aadcConnectors = $connectors | Select Name,Type,Identifier,Version,CreationTime,LastModificationTime
            Add-ADSyncDiagnosticsText -AppendObject $($aadcConnectors | fl)
            Add-ADSyncDiagnosticsHtml -AppendObject $aadcConnectors -Format List

            # Azure AD Connect - Connector Statistics
            if (Get-Command Get-ADSyncConnectorStatistics -ErrorAction SilentlyContinue)  
            {
                Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Connector Statistics"
                Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Connector Statistics"
            
                # Get Connector Statistics using cmdlet Get-ADSyncConnectorStatistics
                $connectors | %{
                    $connectorStats = Get-ADSyncConnectorStatistics -ConnectorName $_.Name | select *
                    Add-ADSyncDiagnosticsText -AppendObject $($_.Name)
                    Add-ADSyncDiagnosticsText -AppendObject $($connectorStats | fl)
                    Add-ADSyncDiagnosticsHtml -Title $($_.Name) -HeadingSize "H3" -AppendObject $connectorStats -Format List 
                }
            }

            # AAD Connectivity Parameters
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect - AAD Connector Account"
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - AAD Connector Account"
            $aadConnectivity = $aadConnectors.ConnectivityParameters | Where-Object {$_.Name -like "UserName"}
            $aadConnectivityStr = "Azure AD Synchronization Service Account: $($aadConnectivity.Value)"        
            Add-ADSyncDiagnosticsText -AppendObject $aadConnectivityStr
            Add-ADSyncDiagnosticsHtml -AppendObject $aadConnectivityStr -Format String

            # AD Connectivity Parameters
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect - AD Connector Account(s)"
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - AD Connector Account(s)"
            $adConnectivity = $ADConnectors.ConnectivityParameters | Where-Object {$_.Name -like "forest-login*" -or $_.Name -eq "forest-name"} | select Name,Value
            Add-ADSyncDiagnosticsText -AppendObject $adConnectivity
            Add-ADSyncDiagnosticsHtml -AppendObject $adConnectivity -Format Table

            # AAD Connect Service
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect - ADSync Service"
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - ADSync Service"
            $adSyncService = Get-WmiObject win32_service | Where-Object {$_.Name -eq 'ADSync'} | Select DisplayName,Name,ProcessId,StartName,StartMode,State,Status,SystemName,PathName
            Add-ADSyncDiagnosticsText -AppendObject $($adSyncService | fl)
            Add-ADSyncDiagnosticsHtml -AppendObject $adSyncService -Format List
            
            # Password Hash Sync Status - Per AD Connector
            Add-ADSyncDiagnosticsText -Title "AD Connector Password Hash Sync - Status"
            Add-ADSyncDiagnosticsHtml -Title "AD Connector Password Hash Sync - Status"
            foreach ($adConnector in $adConnectors)
            {
                $adPasswordSyncConfig = Get-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector.Name

                # Password Hash Sync Heartbeat Check (Ping Event)
                $pingEvents = Get-EventLog -LogName "Application" -Source "Directory Synchronization" -InstanceId 654 -After (Get-Date).AddHours(-3) -ErrorAction SilentlyContinue | 
                              Where-Object { $_.Message.ToUpperInvariant().Contains($adConnector.Identifier.ToString("D").ToUpperInvariant()) } | 
                              Sort-Object  { $_.TimeWritten } -Descending

                $lastHeartbeatTime = $null

                if ($pingEvents -ne $null)
                {
                    $lastHeartbeatTime = $($pingEvents[0].TimeGenerated)
                }
                else
                {
                    $lastHeartbeatTime = "N/A"
                }

                $pwdSyncStateObj = New-Object PSObject -Property @{
                    SourceConnector     = $($adPasswordSyncConfig.SourceConnector)
                    TargetConnector     = $($adPasswordSyncConfig.TargetConnector)
                    Enabled             = $($adPasswordSyncConfig.Enabled)
                    LatestHeartBeatTime = $lastHeartbeatTime
                } | select SourceConnector, TargetConnector, Enabled, LatestHeartBeatTime

                Add-ADSyncDiagnosticsText -AppendObject $($pwdSyncStateObj | fl)
                Add-ADSyncDiagnosticsHtml -AppendObject $pwdSyncStateObj -Format List
            }


            # Azure AD Connect Password Writeback - Status
            $aadPasswordResetConfig = Get-ADSyncAADPasswordResetConfiguration -Connector $aadConnectors[0].Name
            Add-ADSyncDiagnosticsText -Title "Azure AD Connect Password Writeback - Status" -AppendObject $($pwdSyncStateObj | fl)
            Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect Password Writeback - Status" -AppendObject $pwdSyncStateObj -Format List
        }
        else
        {
            Write-Warning "More than one Azure AD connectors are found."
            return
        }

        # Azure AD Connect - Local Database Parameters
        $adSyncParameters = Get-ItemProperty -Path Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ADSync\Parameters | 
            Select Server,SQLInstance,DBName,Path
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Local Database Parameters" -AppendObject $($adSyncParameters | fl)
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Local Database Parameters" -AppendObject $adSyncParameters -Format List 
            
        if($adSyncParameters.Server -eq "(localdb)")
        {
            # Azure AD Connect - Local Database size

            $pathToDB = "$($adSyncParameters.Path)Data"
            
            if ($adSyncParameters.SQLInstance -ne ".\ADSync")
            {
                $sharedInstanceName = "$($adSyncParameters.SQLInstance.SubString(2))"
                $pathToDB = "$pathToDB\$sharedInstanceName"
            }

            if (Test-Path $pathToDB)   
            {
                $adSyncDatabaseSize = 0
                $adSyncDatabase = Get-ChildItem -Path $pathToDB 

                $adSyncDatabaseSize = ($adSyncDatabase | where Name -eq "ADSync.mdf").Length/1MB
                Add-ADSyncDiagnosticsText -AppendObject "Database size: $("{0:N2}" -f $adSyncDatabaseSize)MB"
                Add-ADSyncDiagnosticsHtml -AppendObject "Database size: $("{0:N2}" -f $adSyncDatabaseSize)MB" -Format String

                if ($adSyncDatabaseSize -gt 7168)  
                {
                    $adSyncDatabasWarning = "WARNING: AAD Connect Database is reaching maximum limit size (10GB) | ADSync.mdf = $("{0:N2}" -f $adSyncDatabaseSize)MB `n"
                    Add-ADSyncDiagnosticsText -Title $adSyncDatabasWarning
                    Add-ADSyncDiagnosticsHtml -Title $adSyncDatabasWarning -HeadingSize "b"
                }      
            }
            else  
            {
                $adSyncDatabaseError = @("ERROR: Could not find Local Database folder.")
                Add-ADSyncDiagnosticsText -Title $adSyncDatabaseError
                Add-ADSyncDiagnosticsHtml -Title $adSyncDatabaseError -HeadingSize "b"
            }
          
        }

        # Azure AD Connect - Windows Server Configuration
        $adSyncOS = Get-ADSyncDiagsServerOS
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Windows Server Configuration" -AppendObject $($adSyncOS | fl)
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Windows Server Configuration" -AppendObject $adSyncOS -Format List 
    
        # Azure AD Connect - Proxy Settings
        $adSyncSrvProxyIE = Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings"
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Proxy Settings" -AppendObject ($adSyncSrvProxyIE |fl)
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Proxy Settings" -AppendObject $adSyncSrvProxyIE -Format List 
        
        # Azure AD Connect - Netsh Winhttp Settings
        $adSyncSrvNetsh = netsh winhttp show proxy | Out-String
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Netsh Winhttp Settings" -AppendObject ($adSyncSrvNetsh)
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Netsh Winhttp Settings" -AppendObject $adSyncSrvNetsh -Format String

        # Azure AD Connect - .Net Framework Installed
        $adSyncSrvDotNet = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\" |
            Select-Object -Property Release,Version,InstallPath,TargetVersion
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - .Net Framework Installed" -AppendObject ($adSyncSrvDotNet |fl)
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - .Net Framework Installed" -AppendObject $adSyncSrvDotNet -Format List 

        # Azure AD Connect - Current User WhoAmI
        $adSyncSrvWhoAmI = whoami /all
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Current User WhoAmI" -AppendObject $adSyncSrvWhoAmI
        
        # Azure AD Connect - Programs Installed
        $adSyncSrvApplications = Get-ItemProperty -Path HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object -Property `
            @{Label="Name"; Expression={if ($_.DisplayName -like "") {$_.PSChildName} else {$_.DisplayName}}}, `
            DisplayVersion, Publisher, `
            @{Label="InstallDate"; Expression={
                if ($_.InstallDate -like "") {$_.InstallDate} else {$date = [int] $_.InstallDate; $date.ToString("0000-00-00")}
            }} | sort Name
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Programs Installed" -AppendObject ($adSyncSrvApplications | ft -AutoSize)
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Programs Installed" -AppendObject $adSyncSrvApplications -Format Table 
        
        # Azure AD Connect - Windows Updates
        $adSyncHotfixes = Get-Hotfix | Select HotFixID,InstalledOn,Description,InstalledBy  | Sort-Object â€“Descending â€“Property InstalledOn 
        Add-ADSyncDiagnosticsText -Title "Azure AD Connect - Windows Updates" -AppendObject $adSyncHotfixes
        Add-ADSyncDiagnosticsHtml -Title "Azure AD Connect - Windows Updates" -AppendObject $adSyncHotfixes -Format Table 

        # Export Azure AD Connect - Current User WhoAmI
        $adSyncSrvWhoAmI | Out-File $([string] "$OutputPath\$reportFolder\$reportDate" + "_AADConnect-WhoAmI.txt")

        # Export AAD Connect Full Configuration - Useful when used with AADConnectConfigDocumenter
        Get-ADSyncServerConfiguration -Path $([string] "$OutputPath\$reportFolder\$reportDate" + "_AADConnect-ServerConfig")

        # Azure AD Connect - Export Windows Event Logs
        $after = (Get-Date).AddDays(-7).ToString("yyyy-MM-d")
        $query = "/q:*[System[TimeCreated[@SystemTime>='$($after)T00:00:00.000Z']]]"
        $filename = [string] "$OutputPath\$reportFolder\$reportDate" + "_AADConnect-EvtLogsApplication.evtx"
        wevtutil epl Application $filename $query "/ow:true"
        $filename = [string] "$OutputPath\$reportFolder\$reportDate" + "_AADConnect-EvtLogsSystem.evtx"
        wevtutil epl System $filename $query "/ow:true"

        # Phase 1/2 - Exporting AAD Connect Diagnostics Information
        Write-Host "Exporting AAD Connect Diagnostics Information..."
        Write-Host "`r`n"

        $resultTextReport = Export-ADSyncDiagnosticsText -Title "AADConnect_Report" -ReportDate $reportDate -OutputPath $OutputPath
        $resultHtmlReport = Export-ADSyncDiagnosticsHtml -Title "AADConnect_Report" -ReportDate $reportDate -OutputPath $("$OutputPath\$reportFolder")

        # Phase 2/2 - Compress AAD Connect Diagnostics Information
        if ($OutputPath -eq $("$env:ALLUSERSPROFILE\AADConnect"))
        {
            # Compress all information in ProgramData\AADConnect
            Write-Host "Compressing AAD Connect Diagnostics Information..."
            $resultCompressData = Compress-ADSyncDiagnostics -Title "AADConnect_Report" -ReportDate $reportDate -SourcePath $("$env:ALLUSERSPROFILE\AADConnect") -OutputPath "$env:USERPROFILE\Documents"
        }

        $EventMsgDiagnosticsReportResults = [string] $resultTextReport + "`r`n" + $resultHtmlReport + "`r`n" + $resultCompressData
        WriteEventLog($EventIdDiagnosticsReportEnd)($EventMsgDiagnosticsReportEnd -f $EventMsgDiagnosticsReportResults)
        return
    }

    if ($aadConnectors -eq $null)
    {
        Write-Warning "No AAD connectors are found."
    }

    if ($adConnectors -eq $null)
    {
        Write-Warning "No AD connectors are found."
    }
}

# SIG # Begin signature block
# MIInnwYJKoZIhvcNAQcCoIInkDCCJ4wCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBNI02sr/uI24jl
# xzSTwxzZufaex0zsnej98aIK/8eWSaCCDYIwggYAMIID6KADAgECAhMzAAADXJXz
# SFtKBGrPAAAAAANcMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjMwNDA2MTgyOTIyWhcNMjQwNDAyMTgyOTIyWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDijA1UCC84R0x+9Vr/vQhPNbfvIOBFfymE+kuP+nho3ixnjyv6vdnUpgmm6RT/
# pL9cXL27zmgVMw7ivmLjR5dIm6qlovdrc5QRrkewnuQHnvhVnLm+pLyIiWp6Tow3
# ZrkoiVdip47m+pOBYlw/vrkb8Pju4XdA48U8okWmqTId2CbZTd8yZbwdHb8lPviE
# NMKzQ2bAjytWVEp3y74xc8E4P6hdBRynKGF6vvS6sGB9tBrvu4n9mn7M99rp//7k
# ku5t/q3bbMjg/6L6mDePok6Ipb22+9Fzpq5sy+CkJmvCNGPo9U8fA152JPrt14uJ
# ffVvbY5i9jrGQTfV+UAQ8ncPAgMBAAGjggF/MIIBezArBgNVHSUEJDAiBgorBgEE
# AYI3TBMBBgorBgEEAYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUXgIsrR+tkOQ8
# 10ekOnvvfQDgTHAwRQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBD
# b3Jwb3JhdGlvbjEWMBQGA1UEBRMNMjMzMTEwKzUwMDg2ODAfBgNVHSMEGDAWgBRI
# bmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEt
# MDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIw
# MTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBABIm
# T2UTYlls5t6i5kWaqI7sEfIKgNquF8Ex9yMEz+QMmc2FjaIF/HQQdpJZaEtDM1Xm
# 07VD4JvNJEplZ91A4SIxjHzqgLegfkyc384P7Nn+SJL3XK2FK+VAFxdvZNXcrkt2
# WoAtKo0PclJOmHheHImWSqfCxRispYkKT9w7J/84fidQxSj83NPqoCfUmcy3bWKY
# jRZ6PPDXlXERRvl825dXOfmCKGYJXHKyOEcU8/6djs7TDyK0eH9ss4G9mjPnVZzq
# Gi/qxxtbddZtkREDd0Acdj947/BTwsYLuQPz7SNNUAmlZOvWALPU7OOVQlEZzO8u
# Ec+QH24nep/yhKvFYp4sHtxUKm1ZPV4xdArhzxJGo48Be74kxL7q2AlTyValLV98
# u3FY07rNo4Xg9PMHC6sEAb0tSplojOHFtGtNb0r+sioSttvd8IyaMSfCPwhUxp+B
# Td0exzQ1KnRSBOZpxZ8h0HmOlMJOInwFqrCvn5IjrSdjxKa/PzOTFPIYAfMZ4hJn
# uKu15EUuv/f0Tmgrlfw+cC0HCz/5WnpWiFso2IPHZyfdbbOXO2EZ9gzB1wmNkbBz
# hj8hFyImnycY+94Eo2GLavVTtgBiCcG1ILyQabKDbL7Vh/OearAxcRAmcuVAha07
# WiQx2aLghOSaZzKFOx44LmwUxRuaJ4vO/PRZ7EzAMIIHejCCBWKgAwIBAgIKYQ6Q
# 0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNh
# dGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5
# WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQD
# Ex9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0B
# AQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4
# BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe
# 0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato
# 88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v
# ++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDst
# rjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN
# 91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4ji
# JV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmh
# D+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbi
# wZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8Hh
# hUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaI
# jAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTl
# UAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNV
# HQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQF
# TuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29m
# dC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNf
# MjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5t
# aWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNf
# MjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcC
# ARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnlj
# cHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5
# AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oal
# mOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0ep
# o/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1
# HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtY
# SWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInW
# H8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZ
# iWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMd
# YzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7f
# QccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKf
# enoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOpp
# O6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZO
# SEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGXMwghlvAgEBMIGVMH4xCzAJ
# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAANclfNIW0oEas8AAAAAA1ww
# DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK
# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIEDzpfMi
# DJtzD5PeF1z75mfCHUgQcOu6FzvqKJj79UpzMEIGCisGAQQBgjcCAQwxNDAyoBSA
# EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w
# DQYJKoZIhvcNAQEBBQAEggEA0eI3uNrPLbp9i7xYxvkpWvucxRPW4DcJAHunMUQC
# pbHHu+7K9aUM/WW1TMTOT+zGgiGpXyV7BGhKa/cFDImxZMpmqOnInCWQc1i15+SE
# SKwbXZQu5+lcroF5PLLD5WNcW4YZ2q95LaFGuHcqh3RQUKwQ1ocxcMDYUJNb5R9a
# HkdiRA+dmjByFfsyay1oaz5XZKP2tjn8OZEPaiTDcJT+eaSdY1ZoWaLNorcshgyD
# wOste7cFRgJdruWF2p7e2NwNtRS6Xgo6CY5qPJhvDBoAmLDRxaWfBb0l8Qh1MfOK
# dDOOHIZTXwCfP3o9mskx1gEOdX/NQxHtZDuM5UapmvZ8DKGCFv0wghb5BgorBgEE
# AYI3AwMBMYIW6TCCFuUGCSqGSIb3DQEHAqCCFtYwghbSAgEDMQ8wDQYJYIZIAWUD
# BAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoD
# ATAxMA0GCWCGSAFlAwQCAQUABCDWxe6nEGTaiXItzrZC0DSkrs0p3Ub39bMMfx6o
# LpGpmwIGZFzcbQ/5GBMyMDIzMDUxNzIyNTUzMS45MTJaMASAAgH0oIHQpIHNMIHK
# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk
# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN
# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMSYwJAYDVQQLEx1UaGFsZXMgVFNT
# IEVTTjozQkJELUUzMzgtRTlBMTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3Rh
# bXAgU2VydmljZaCCEVQwggcMMIIE9KADAgECAhMzAAABxjDNLtbTocD0AAEAAAHG
# MA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4X
# DTIyMTEwNDE5MDEzNFoXDTI0MDIwMjE5MDEzNFowgcoxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh
# IE9wZXJhdGlvbnMxJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNOOjNCQkQtRTMzOC1F
# OUExMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjAN
# BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA770iOr6v4Hk1m3SZj+1BR/iuofv+
# f6eVb7Hc21YxzAzro4G6kKXF47YAsEgrWWT1ogvp0IroFm8CdRZTf/DlQ0fbNNO9
# pCA01KJ03zH82Clmk9ze9r1jPJ1ZJaMnsZmAy7VpY9mNqX9dhPvnW1/ZxbbiHv7q
# wwgw9U2ST5mfcpPutsI/Qr/gLC6aTI3UCYziVPZ/Qfag8NQhKkpHZO3Kr5r83cy7
# jz4OWPy5M2WitWv5bJJ5rBTW518QPEzFwzq8e8P722CWKZJFjN8etBgsK05gHeHa
# N9kmlpYJJL84v9JiaX7NFJkORhApEFZiUIaZoLxJt4pcBDzf+WD9UAjRKCrAseJ/
# ckzQvOn95X4Ot4asnOuNhcCdcQWcrZoykFmEaoYkrsD7n/4nFFHwJDKUaBYZZLwP
# j7ux48S1Ye+cMccMxdRSjuoG4rqJqpEd6gzfz239v36L+LtOlQhfL5cnclhNSWdm
# Kw1THyekH96RNtOpIE7c+9Tnsv1aE9hphejLOJxfsXTkyw0FIdilc0CP7zzUsqaC
# GF2mFXRwL4jfX1RyV7QGKEeOpvGZqQKLHVZbLD32ztW8Lfv99xQ24d/TIxO9LReu
# Hsnwotn+8BsCrzu+/24vOcA9Xcpd7kIeW4zmUxhFsv4KCfiqMptZhhMAA0SqDuj2
# 3cj10smXROLUnhUCAwEAAaOCATYwggEyMB0GA1UdDgQWBBRxX/lHiShECp1n2lMa
# 6G1uLvNglDAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8E
# WDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9N
# aWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYB
# BQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
# cGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEw
# KDEpLmNydDAMBgNVHRMBAf8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMIMA0GCSqG
# SIb3DQEBCwUAA4ICAQALzF724jXugDU486PMBYR7Cc6aHr2nJDnGsnkqwZYmjRi2
# 8qv6S1Ly772zwm5DI189zgAQ99xhEjW6uYkrX5UrtVu7JUQP6bBBBJ98c28FAIPI
# K3fkQNCv2rxRjfQMJSdcwsJeTK7Ld09OuA5hY4PWCBgJpfY71LcaXz3FR8ANPFX6
# zcKYbgYOZregtpDub34N0QhR7wc/FcmV+g4I3IdTAoMD2/WI5ZsfKTzBUn/U3ApU
# hNwbOl5YSC+f9S1LStbZLwPzMS+fLPXJUSe7SSvspfSsr/VEe0oQhmaR+5vcq+7M
# Lw861WBVhYpJ7TB5YBS5ORO9XdIbcpbBFwcHPmb8iZqSIqW9JpgG76+5NQULPVzZ
# 75z5W2R5ZiyQktiHpMwjX2OO29Z8+nTw2tOsVCcwzH9LoELedv3PjcpbwOyLjtm1
# T4XHYd3qbd9DXoBjNYkSjdi37pNp58u+rITltLKOjjQCJwj1FpnuBY825B5C0uC/
# NYESEKsTicEjhS/4ujBXLcNGDhVBl2vHE6qY/YW4ky1vcypvUrsG81gpv2+8/ihO
# wg4wTLO7XqikeIiU3ZWAUAoOpTl14tedQqxbHTDveJYR3OU0yKB2xwf87EWCAb0C
# JimhDmyQaKEvSV0fLW9iVyI0wYcG4V2aVN6TrZ4mr+ffaqDQD9F+HpPhP0plAzCC
# B3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAw
# gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMT
# KU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIx
# MDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# UENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57Ry
# IQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VT
# cVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhx
# XFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQ
# HJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1
# KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s
# 4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUg
# fX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3
# Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je
# 1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUY
# hEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUY
# P3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGC
# NxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4w
# HQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYB
# BAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNv
# bS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcD
# CDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T
# AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNV
# HR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9w
# cm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEE
# TjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2Nl
# cnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOC
# AgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/a
# ZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp
# 4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq
# 95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qB
# woEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG
# +jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3B
# FARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77
# IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJ
# fn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K
# 6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDx
# yKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggLLMIICNAIBATCB
# +KGB0KSBzTCByjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEl
# MCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEmMCQGA1UECxMd
# VGhhbGVzIFRTUyBFU046M0JCRC1FMzM4LUU5QTExJTAjBgNVBAMTHE1pY3Jvc29m
# dCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAC01yuYmIVvsokSa
# cJmWe8Mu2QFtoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw
# DQYJKoZIhvcNAQEFBQACBQDoD0PLMCIYDzIwMjMwNTE3MjAxNTA3WhgPMjAyMzA1
# MTgyMDE1MDdaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAOgPQ8sCAQAwBwIBAAIC
# AmQwBwIBAAICEW0wCgIFAOgQlUsCAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYB
# BAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQUFAAOB
# gQB1DdMU76OewjeA9N8HsGe3pWP/vFka81Iam/ylyXXmjotgVdGnCAB6okd2e1aW
# fNKGyA68WsvFGKS61lMDjtUqPbohK+RzcUfQZrpmcBeXruuT7DEQxcVoWfdVKKkT
# giC5sYf2XHdVjGVa/ghHnA37rttWrdvkoKlcpHbtfEp+7TGCBA0wggQJAgEBMIGT
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAABxjDNLtbTocD0AAEA
# AAHGMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQ
# AQQwLwYJKoZIhvcNAQkEMSIEIMoWxbnbgU32MKX091V5eI62NNIepODf2Ya/HRg1
# UduIMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgVjETXFXJvZgpxiZqk/Bw
# DWA5Pxw6hehULpkFr9rjry0wgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UE
# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z
# b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ
# Q0EgMjAxMAITMwAAAcYwzS7W06HA9AABAAABxjAiBCBz7s1tCw6chtMFvbn9yrK5
# 3zNr3utQKlpPLjeplw7+MDANBgkqhkiG9w0BAQsFAASCAgDpm8ebIgQ3jye8J619
# VFGSS3/XPL1KDXOLFKfuOu70OnUqzXDxrxMYFOXIkYTtbcnSseJRCS+wOHCqnh2p
# 0RyB9mqs5niF64uZf9M0BAKmIbUDavtO1qLch6e9Jw51pfPAMPimdZnW4SUtoaa4
# zupW+h6OgyfKLYXS3cSDg9XMEuXKTspdWYSBrib2GIZYXFfN6Di48lqVQ5a3+Rtr
# HuB3lpNQhhFcwqcH+BAY+Po5bGZ7j51dCuiL9ufMclq+jD+G/St1yjydf7OgxNrA
# czz73tyXU8zPw6+51oVUOoo6m7SG7sRPwNXWVfzjyMRY1bfCuMOXOoNM55esoRVo
# dQUGUUgxLkGfVpqq/jMAlawGqnYLtJ9c1Lc5/9aA3Q9fQyPixFw8xwOAMtP6Pa79
# 7aTQPARCI28tW4aJmb3nc+CZPbdjrn8OnixaXIOVqI98owwB60yRgilwhencCvrU
# DNzkjSy1mvJ4rZfQGH6tpvqn0xizJ9RgaLpsg2N19LDQzePmYqAzPGLQ/HjvGqNV
# cMq7GSR0+DGl0bIYPaqbnNzzwoqujVkqlz7pk8+ZDonTHWWsc6jKKhryqpfl0iPt
# 9imaJzyqlRBlB9Vvs26nxQ2zMrKwmyT65MAKIix4/V2bNFSeI+Hqesi3SGVs2VGM
# i/kSIvC6WSNlzxEFmPQ6q3xMhQ==
# SIG # End signature block