Systems Admin

Find Your Entra Connect Version: 4 Ways (Cloud, GUI, Sync App, PowerShell)

The first thing any Entra Connect troubleshooting call asks: which version are you running. Microsoft’s release cadence is brisk; minor sync issues often turn out to be known bugs in older builds; upgrade-related issues need both old and new version numbers. Knowing the answer takes seconds — if you know where to look. This post covers four ways to find the Entra Connect version, each suited to different access levels and contexts.

Pick by access level

Method Where Time Best for
1 — Entra admin centre Cloud (browser) ~30 sec You only have cloud access; no RDP to the server
2 — Programs and Features EC server (GUI) ~10 sec Quick eyeball when you’re already on the server
3 — Synchronization Service Manager EC server (GUI) ~5 sec Already in the sync app for other troubleshooting
4 — PowerShell EC server (cmd-line) 2 cmds Scripted inventory / automation

All four read the SAME underlying value — the build number you get back is the same regardless of method. Differences are speed and access requirements.

Method 1 — Entra admin centre

Use when: you can’t reach the EC server but you have Global Admin in the cloud tenant.

Microsoft Entra admin centre login page with Global Administrator credentials being entered, the cloud-side starting point for Method 1
Method 1 starts in the cloud. Sign in to the Entra admin centre with a Global Administrator account.
  1. Sign into entra.microsoft.com as a Global Administrator.
  2. Left navigation: Identity > Show more if needed.
  3. Hybrid management > Microsoft Entra Connect.
Entra admin centre left navigation expanded showing Identity > Hybrid management > Microsoft Entra Connect with the Microsoft Entra Connect Health link visible in the dashboard” /><figcaption>Identity > Hybrid management > Microsoft Entra Connect > Connect Sync. The dashboard shows a Microsoft Entra Connect Health link — click it.</figcaption></figure>
<ol start=
  • Click Connect Sync.
  • In the dashboard, click the Microsoft Entra Connect Health link.
  • Microsoft Entra Connect Health blade with the Sync services tile selected and the tenant service entry highlighted
    Connect Health blade. The Sync services tile lists one entry per tenant; pick yours (typically [your-tenant].onmicrosoft.com).
    1. Sync services.
    2. Click your tenant (typically [your-tenant].onmicrosoft.com).
    Sync services properties view showing Microsoft Entra Connect Servers as one of the configuration sections
    Sync services configuration. Look for Microsoft Entra Connect Servers in the property list and click in.
    1. Find Microsoft Entra Connect Servers in the property list. Click.
    Connect Servers list pane showing one or more EC server hostnames registered with the tenant
    Server list. Each row is one EC server registered with the tenant (in HA setups there will be multiple). Click the specific host you want to inspect.
    1. Click the specific server name from the list.
    Selected EC server detail view with the Properties section expanded
    Server detail. Expand Properties if not already open.
    1. Click Properties if not already expanded.
    Server Properties Synchronization tab showing the Microsoft Entra Connect Version field populated with a build number like 2.1.20.0
    Synchronization tab. The Microsoft Entra Connect Version field has the build number. Done — that’s your answer.
    1. Look at the Synchronization tab. The Microsoft Entra Connect Version field has the build number.
    Method 1 final view zoomed in on the Microsoft Entra Connect Version field showing the exact build number visible to a cloud admin
    Zoomed view of the version field. Method 1 took 8 clicks to get here, but it works without RDP into the server — useful when you only have cloud access.

    Eight clicks total. Slow but reliable when you have no other access.

    Method 2 — Programs and Features (on the EC server)

    Use when: you’re logged into the EC server’s desktop and want a quick look.

    1. Open Control Panel.
    2. Programs > Programs and Features.
    3. Scroll to Microsoft Entra Connect (or Microsoft Azure AD Connect for very old versions).
    4. Read the Version column.
    Programs and Features control panel applet on the EC server showing Microsoft Entra Connect in the installed program list with the Version column displaying the same build number, the Method 2 view
    Method 2 — Programs and Features on the EC server. Control Panel > Programs > Programs and Features > scroll to Microsoft Entra Connect > read Version column. Three clicks. Fastest path if you’re already on the server.

    Three clicks. Fastest GUI path if you’re already on the server.

    Caveat: the version Programs and Features shows is the INSTALL version — if Microsoft auto-applied a runtime update, the actual running version may be slightly different. For troubleshooting, prefer Method 3 or Method 4 which read the running version.

    Method 3 — Synchronization Service Manager

    Use when: you’re already in the Sync Service app investigating jobs or errors.

    Synchronization Service desktop application open on the EC server with the operations history visible in the main pane, the entry point for Method 3
    Method 3 starts by opening the Synchronization Service desktop app on the EC server (Start menu > search Synchronization Service).
    1. Open Synchronization Service from the Start menu.
    Sync Service top menu with the Help dropdown opened and the About menu item highlighted
    Help > About from the top menu.
    1. Top menu: Help > About.
    About dialog box displaying the Sync Service version at the top of the modal, the Method 3 result
    About dialog — version is at the top. This method is most useful when you’re ALREADY in the Sync Service app for other troubleshooting; saves you switching tools just to read the version.
    1. The version is at the top of the About dialog.

    Two clicks if the app is already open. The About dialog also shows the full build details (revision, signature) which is useful when escalating to Microsoft support.

    Method 4 — PowerShell

    Use when: automating, scripting, or running fleet-wide inventory.

    1. Open PowerShell as Administrator on the EC server.
    2. Load the ADSync module:
    Import-Module ADSync
    1. Pull the version:
    (Get-ADSyncGlobalSettingsParameter |
        Where-Object { $_.Name -eq 'Microsoft.Synchronize.ServerConfigurationVersion' }).Value
    Elevated PowerShell window on the EC server showing the Import-Module ADSync command followed by Get-ADSyncGlobalSettingsParameter | Where-Object filter returning the version string as scalar output, the Method 4 result
    Method 4 PowerShell. Import-Module ADSync then the Get-ADSyncGlobalSettingsParameter pipeline returns the version as a string. Use this for fleet inventory scripts (loop across hosts, write to CSV) or any context where you can’t open a GUI.

    Output: a scalar string like 2.1.20.0. Easy to capture in scripts.

    Fleet inventory pattern

    For environments with multiple EC servers (HA pairs, dev/test/prod), pull versions across all hosts at once:

    $hosts = @('ec01.infotechninja.local', 'ec02.infotechninja.local')
    
    foreach ($h in $hosts) {
        $v = Invoke-Command -ComputerName $h -ScriptBlock {
            Import-Module ADSync
            (Get-ADSyncGlobalSettingsParameter |
                Where-Object { $_.Name -eq 'Microsoft.Synchronize.ServerConfigurationVersion' }).Value
        }
        [PSCustomObject]@{ Host = $h; Version = $v }
    } | Format-Table

    Useful before a fleet upgrade to confirm everyone’s on the same starting version.

    Things that bite people

    Method 1 disagrees with Methods 2-4

    The cloud-side view in Method 1 reads from the last health-check report uploaded to the cloud (sent every few minutes by the Health Agent). If the EC server was upgraded but the Health Agent hasn’t reported yet, Method 1 can show the OLD version while Methods 2-4 on the server show the NEW. Wait 30 minutes, refresh Method 1.

    Programs and Features shows old version after auto-update

    Microsoft sometimes pushes incremental updates to the running EC server without bumping the install metadata. Programs and Features shows the original install version; Methods 3-4 show the running (possibly newer) version. The discrepancy is intentional — Programs and Features is a logical install-history record, not a runtime version reporter.

    Health Agent installed disabled

    If you installed Entra Connect using Hybrid Identity Admin (per the Part 1 alternative), the Health Agent installs but is disabled. Method 1 returns nothing because no health data is being uploaded. Either enable the Health Agent (specific PowerShell from the Microsoft docs) or use Methods 2-4 instead.

    Method 4 returns null

    If Import-Module ADSync succeeds but the Get-ADSyncGlobalSettingsParameter pipeline returns null, the parameter name has changed in your version. The fallback approach is to read the version directly from the binary’s file properties:

    (Get-Item 'C:\Program Files\Microsoft Azure AD Sync\Bin\miiserver.exe').VersionInfo.FileVersion

    Same value, different path to it. Useful when troubleshooting why the documented method doesn’t work.

    Help > About missing on Server Core

    Server Core has no GUI, so Method 3 isn’t available. Anyway, EC isn’t supported on Server Core (per Part 1); if you somehow have it running, use Method 4 instead.

    Comparison: which version do I have?

    Once you know the version, the next question is “is it old?” Microsoft maintains a Versioning Reference page listing which versions are current, supported, deprecated, and blocked. Cross-reference your version against that page. Anything older than 2.5.79.0 will be blocked from sync after September 30, 2026 (per Part 2).

    What’s next

    Knowing the version is the first step in any upgrade conversation. Subsequent posts cover related operational topics: finding service accounts, finding the EC server itself in larger environments, and the actual upgrade procedure. Series in the Hybrid Identity pathway.

    Leave a Reply