Book_03 — Discovery: The Authentication Audit

The Authentication-Audit Script, the Arc-Eligibility Classification, and the Compliance-Monitoring Telemetry Sink

No migration survives contact with an estate it has not measured. Describes the authentication-audit script discovery instrument — what it captures (instances, authentication mode, login types, service accounts, SPN registration), the three-category Arc-eligibility classification that drives migration sequencing, and how its output feeds the compliance-monitoring pipeline as a living compliance record rather than a point-in-time spreadsheet.
Note

Where Book 02 measured the estate to decide what survives, this book measures the authentication posture of what remains. The authentication-audit script is the instrument, the Arc-eligibility classification is its most consequential output, and the per-instance compliance record — not a spreadsheet — is its deliverable.

On every retained instance the audit reads the version, edition and host OS, the authentication mode, every login by type, the engine service account and SPN, and linked servers; it produces a per-instance compliance record and an Arc-eligibility category, both sent to compliance monitoring.

What the authentication audit reads on each instance, and where its output goes.
TipDownload this book

Book_03-bundle.docx — every chapter of this book concatenated into one Word document. Regenerated on every site deploy.

Chapters

Place in the dependency chain: Step 3 — Audit survivors.

Authoritative references

Checked 19 October 2026.

TipContinue the series

← Previous: Book 02 — The Estate Itself · Index · Next: Book 04 — Arc as the Identity Bridge →

Back to top