Offline - Disconnected environment

Scenario: Data collection machine has no internet access, so it isn't possible to use OMS Gateway**

This article provides guidance on how to assess a completely disconnected environment. Disconnected means there's zero network connectivity from the assessed environment to the internet or to any other machine that has internet access. This scenario requires additional configuration and steps that are listed in this article.

Requirements: For this scenario you need two machines:

One is a data collection machine, which needs to fulfill prerequisites from the assessment.
The other is an internet access machine, which has internet access and can upload data to Azure Log Analytics.
- This machine needs to be enrolled into Azure Arc to upload your batch of data from the first machine that isn't connected to the internet.

Important

This connectivity scenario can't be used for the following On-Demand assessments:

Office 365 Exchange Online
Office 365 Skype and Teams
Office 365 SharePoint Online
Microsoft Azure
SharePoint Assessment

To successfully execute On-Demand assessments this way, you need to follow an offline secure file copy process to transfer files to and from your internet connected machine and the environment being assessed.

Internet connected machine

After enrollment into Azure Arc and setup of your assessment are both complete, follow these steps on your machine that does have internet access.

Open Task Manager.
Open Scheduled Tasks, and then drill down to the assessment task.
Set the scheduled task to start manually, removing the weekly schedule.
Start the scheduled task. (This downloads the assessment executable and the assessment package.)
Go to the Working Directory that you entered in the assessment setup: \<Working Directory\>\XXAssessment (where XX is different for each assessment).
A numbered folder should now appear. As soon as you see this folder, stop the OMSAssessment.exe process in Task Manager.
Copy the OMSAssessment folder created in \<working directory\>\XXAssessment to a USB drive (or another transfer method of your choice) so you can transfer its content to your data collection machine.
Navigate to C:\ODA\Packages. Find the execpkg for the specific technology you need (like ADAssessmentPlus.execpkg), then copy that execpkg file to the same location you used to store your OMSAssessment folder in Step 6.

This concludes all required actions on your machine that has internet access until you eventually want to upload data.

Data collection machine

Create a folder (for example: C:\MicrosoftAssessment) on your local drive that has enough free storage space to store all collected data up to 10GB.
Create a directory for data collection (for example: C:\MicrosoftAssessment\Collect).
Copy the Execpkg file and OMSAssessment folder to your C:\MicrosoftAssessment (or other name you gave it) folder.
Open an elevated CMD Prompt and naviagate to C:\MicrosoftAssessment\OMSAssessment.
Run one of the commands from this list: List of all commands for running assessments.

For example, for AD Assessment, you'd run the following commmand:

OmsAssessment.exe -execPackage
C:\MicrosoftAssessment\ADAssessmentPlus.execpkg" -w
"C:\MicrosoftAssessment\Collect" -trace Off -headers False
-assessmentname "ADAssessment" -discoverysettings "AD" -computername
"\<DataCollectionMachine\>" -target ToolsMachine -op "\<Location for
the Recommendation files\>"

Data collection then starts and generates new files:

new.prerequisite<"assessmentguid">.assessmentrecs new.recommendations.<"assessment guid">.assessmentrecs

When the assessment finishes, the command prompt returns and you shouldn't see anything still running.

Copy the files that are named new.* over to your machine that has internet access.
Transfer the new.* files into your “<"working directory">\XXAssessment location.

Our Azure data collection rules should now detect the new set of recommendations, then upload your data to the Workbooks as soon as possible.

Review your data afterward in the portal.

It can take up to one hour after the data is submitted for it to become visible.

List of all commands for running assessments

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\ADAssessmentPlus.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings AD
-computername "<DataCollectionMachine>" -assessmentname ADAssessmentPlus
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

AD Security

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\ADSecurityAssessment.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings AD;DNS
-computername "<DataCollectionMachine>" -assessmentname ADSecurityAssessment
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

Exchange

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\ExchangeAssessment.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings AD;EXCH
-computername "<DataCollectionMachine>" -assessmentname ExchangeAssessment
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

Skype for Business

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\SfBAssessment.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings Lync
-computername "<DataCollectionMachine>" -assessmentname SfBAssessment
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

SCCM

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\SCCMAssessmentPlus.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings
"ConfigMgr:ConfigMgrServerName=sccm-01,ExcludeDistributionPoints=True"
-computername "<DataCollectionMachine>" -assessmentname SCCMAssessmentPlus
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

SCOM

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\SCOMAssessmentPlus.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings
"OpsMgr:ServerName=scom-01,IncludeGateways=False" -computername
"<DataCollectionMachine>" -assessmentname SCOMAssessmentPlus
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

SQL Server

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\SQLAssessmentPlus.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings
"SQL:ServerName=sccm-01" -computername "<DataCollectionMachine>"
-assessmentname SQLAssessmentPlus -recommendationsbatchfile 100000 -headers
False -target ToolsMachine -op "C:\MicrosoftAssessment" WaitForExit: False

Windows Server

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\WindowsServerAssessment.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings
"Server:ServerName=cluster-01;cluster-02;cluster-03;
dc-01;dc-02;dc-03;dc-04;hyperv-01;iis-01;sccm-01;scom-01;server-01;server-02;
server-03;sfb-01;sp-01;ex-01;sql-01;sql-02,Server:FindServerRoles=false"
-computername "<DataCollectionMachine>" -assessmentname
WindowsServerAssessment -recommendationsbatchfile 100000 -headers False
-target ToolsMachine -op "C:\MicrosoftAssessment" WaitForExit: False

Windows Client

.\omsassessment.exe -execPackage
"C:\MicrosoftAssessment\WindowsClientAssessmentPlus.execpkg" -w
"C:\MicrosoftAssessment\collect" -trace Off -discoverysettings
"Client:ClientNames=client-01;client-02;client-03,
Client:Domain=fourthcoffee.com,Client:MaxClients=100,
Client:PasswordUpdatedInLast=180,
Client:LdapQueryFilter=(&(!operatingSystem=Windows Server*)
(!operatingSystemVersion=4*)(!operatingSystemVersion=5*)" -computername
"<DataCollectionMachine>" -assessmentname WindowsClientAssessmentPlus
-recommendationsbatchfile 100000 -headers False -target ToolsMachine -op
"C:\MicrosoftAssessment" WaitForExit: False

Feedback

Was this page helpful?

Last updated on 2026-10-09