Windows Server
A local change can be reverted by policy and create a recurring incident. Inspect applied computer and user policy before editing the setting again.
Active Directory & Group Policy1 min read
Read article : Investigate a server setting managed by Group Policy
Windows Server
Policy processing can fail when DNS, authentication or SYSVOL access is broken. Separate file retrieval from the policy's own settings.
Active Directory & Group Policy1 min read
Read article : Diagnose Group Policy retrieval failures through SYSVOL access
Windows Server
A controller can have an older policy copy when DFS Replication does not keep up. Inspect backlog in the correct direction between known partners.
Active Directory & Group Policy1 min read
Read article : Check SYSVOL replication backlog between known partners
Windows Server
Recreating an object with the same name does not preserve its original identity or permissions. Search approved deleted-object metadata first.
Active Directory & Group Policy1 min read
Read article : Check whether an AD object is deleted before recreating its name
Windows Server
A record can appear on one DNS server and be absent from another because zone replication scope or AD replication differs.
Active Directory & Group Policy1 min read
Read article : Compare AD-integrated DNS zone scope with intended visibility
Windows Server
A service account's password behavior may differ from the default domain policy because a fine-grained policy applies.
Active Directory & Group Policy1 min read
Read article : Check effective fine-grained password policy for a service account
Windows Server
A service using a group managed service account can fail when the host is not authorized or the account is not installed correctly.
Active Directory & Group Policy1 min read
Read article : Check whether a server can use its intended gMSA
Windows Server
A recurring replication fault may affect several controllers despite an apparently healthy single partner. Gather a bounded scope of failure records.
Active Directory & Group Policy1 min read
Read article : Review recent AD replication failures across a selected scope
Windows Server
A client can cache an older answer while the authoritative zone is already correct. Inspect the managed zone directly before editing it.
DNS, DHCP & Server Networking1 min read
Read article : Compare an authoritative Windows DNS record with the client answer
Windows Server
Internal names can resolve while external queries fail because forwarding, recursion or upstream connectivity differs.
DNS, DHCP & Server Networking1 min read
Read article : Investigate external-name failures on a Windows DNS server
Windows Server
Only one namespace may fail because its conditional forwarder targets stale addresses or uses the wrong replication scope.
DNS, DHCP & Server Networking1 min read
Read article : Check a conditional forwarder for a partner domain
Windows Server
Dynamic records can disappear because of aging configuration, failed refresh or another authorized change. Check policy before disabling cleanup.
DNS, DHCP & Server Networking1 min read
Read article : Review scavenging before investigating disappearing DNS records