Active Directory Certificate Services migration and policy
A certification authority can look quiet while remaining one of the most consequential services in a Windows environment.
Windows and identity
Windows and identity
Windows, accounts, Active Directory and access.
Start here
Explore the subtopics.
Choose a subtopic below, or filter this collection by format and difficulty.
21 guides
Active Directory and Identity
Work from effective identity, replication, trust, policy and authentication state before changing accounts, devices or domain services.
Back to the category mapActive Directory forest and domain recovery
Prepare and rehearse a trusted Active Directory forest/domain recovery.
Active Directory replication diagnosis and convergence proof
Active Directory replication has two directions in every report: a destination DC receives a naming context from a source partner.
Active Directory-integrated DNS diagnosis
Active Directory does not discover domain controllers by guessing server names. Trace an Active Directory lookup from the client through DNS.
BitLocker deployment, recovery and operational control
Checking only the first of those produces a deceptively reassuring dashboard.
Bulk users, attributes and directory reporting
Turn an approved user-data source into bounded, idempotent Active Directory changes with row-level validation, review.
Computer rename, join and network-location repair
A Windows device name, its Active Directory computer object and its local machine-account secret form one identity.
Deleted-object and directory-data recovery
Restoring an Active Directory object is not the same as recovering the person's or service's identity.
Domain controller metadata and failed-server cleanup
Metadata cleanup is not deleting an old computer icon. Remove a permanently failed domain controller through the supported metadata-cleanup path.
Domain trust and secure-channel repair
But the same user experience can begin with DNS, time, an unreachable controller or a restored/duplicated computer.
Domain-controller boot and rollback diagnosis
A domain controller is both a Windows server and one replica in a distributed database.
Folder redirection, mapped drives and access recovery
Recover access to redirected folders or mapped drives without changing ownership.
FSMO and Global Catalog placement and recovery
Most Active Directory writes are multi-master. Place FSMO roles and Global Catalog services deliberately.
Group Policy design, deployment and troubleshooting
It feels mysterious when administrators change several of those inputs and then run gpupdate /force until the symptom moves.
Manage Active Directory Profile Photos Without Creating Another Data Silo
A profile photo looks like one field. Choose one governed source for staff profile photos.
Retire Small Business Server Without Losing Identity, Email, or File Services
Years later, that concentration makes retirement deceptively difficult.
Run an Active Directory First-Response Health Check Before Attempting Repair
Active Directory failures rarely stay in one box. Build a trustworthy first picture of Active Directory health.
SYSVOL, DFSR and legacy replication recovery
Group Policy has two halves: policy objects in Active Directory and files in SYSVOL. Determine whether SYSVOL or directory replication is failing.
Windows DHCP migration and recovery
A DHCP migration is not finished when a destination console displays the scopes. Move or recover Microsoft DHCP without losing reservations and leases.
Windows Domain Time on the PDC Emulator: Configure, Verify, and Recover the Hierarchy
Find the real forest-root time authority, prove its current path, configure approved upstream sources without breaking domain hierarchy, and verify the result beyond a one-off resync.
Windows LAPS and supported administrator-account recovery
Windows LAPS gives each managed device a unique, rotating local administrator password and stores it in an authorised directory.
9 guides
Windows Operations
Diagnose Windows from effective configuration, logs and lifecycle state before applying repair commands or broad resets.
Back to the category mapChoose the Right Account During Windows Setup and Keep Ownership Clear
Choose the correct local, personal Microsoft or organisational work/school identity during Windows setup so the intended owner controls the device.
Diagnose Windows Hello and Local Sign-In Before Resetting Credentials
A Windows PIN is not a short version of your account password. With Windows Hello, the PIN or biometric gesture unlocks a credential bound to that device.
Diagnose Windows Update Across Microsoft Update, Managed Services and WSUS
“Windows Update is broken” can describe very different failures. Identify who actually controls updates for the device.
Repair a Corrupt Windows User Profile and Misplaced Shell Folders
When Desktop, Documents or Pictures suddenly appears in the wrong place, it is tempting to call the whole Windows profile corrupt.
Repair Windows Installation, Edition, Activation, and Upgrade Failures
Windows installation, upgrade and activation are connected, but they are not the same process.
Retire Unsupported Windows Without Losing the User, Data, or Workload
An unsupported Windows PC is not automatically obsolete hardware, and a successful file copy is not a completed migration.
Windows file permissions and protected resources
“Access denied” does not automatically mean the user needs Full Control. Explain why a Windows user can or cannot access a local file.
Windows image and system-file repair
DISM and System File Checker are often pasted together as a universal Windows cure.
Windows optional features and .NET installation
NET” does not tell you what to install. NET runtime, or an SDK needed only to build software.
Looking for something else?
Explore the complete library.
Browse every current guide or search by the symptom, platform or outcome you have in mind.
Browse every guide