Windows Server / Active Directory & Group Policy
Investigate a domain controller that is not advertising correctly
A running AD service does not guarantee the controller advertises the functions clients need. Inspect the controller's advertising test and related logs.
Environment and inputs: Windows Server 2022 / 2025 baseline · Windows PowerShell with the specified role or RSAT modules; native utilities are identified in the text. Use delegated administration and elevation only where required.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
dcdiag /s:DC01 /test:Advertising /vRead the result
The targeted test checks whether the controller advertises expected capabilities. A failed check must be interpreted with service state and the controller's intended role.
Resolve and verify
Read the exact DCDiag message, correlate Netlogon and Directory Service events and repair the failed dependency. Verify client discovery afterward.
Before changing production
Do not force a controller into service while recovery or initial synchronization is incomplete.