Servers & Infrastructure

Practical troubleshooting paths for MSP technicians dealing with real-world support failures.

Scheduled reboot policy applies but maintenance script never runs beforehand

Field Summary

Scheduled reboot policy applies but maintenance script never runs beforehand is a Windows Server Core Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Portal status is not proof of local execution; verify run history, service state, and security blocks.

Windows Event Forwarding subscriptions healthy but one server never sends logs

Field Summary

Windows Event Forwarding subscriptions healthy but one server never sends logs is a Windows Server Core Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Portal status is not proof of local execution; verify run history, service state, and security blocks.

Time service source changed and Kerberos breaks intermittently

Field Summary

Time service source changed and Kerberos breaks intermittently is a Windows Server Core Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Server Manager cannot manage one host because WinRM listener missing

Field Summary

Server Manager cannot manage one host because WinRM listener missing is a Windows Server Core Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

NPS certificate present but RADIUS auth still fails on Wi-Fi

Field Summary

NPS certificate present but RADIUS auth still fails on Wi-Fi is a Certificate Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Subordinate CA certificate renewed but issuing templates fail

Field Summary

Subordinate CA certificate renewed but issuing templates fail is a Certificate Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Revocation check timeout breaks internal LDAPS connections

Field Summary

Revocation check timeout breaks internal LDAPS connections is a Certificate Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Autoenrollment succeeds for users but not computers

Field Summary

Autoenrollment succeeds for users but not computers is a Certificate Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

AD CS web enrollment loads but certificate request submission fails

Field Summary

AD CS web enrollment loads but certificate request submission fails is a Certificate Services ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Conditional forwarder in AD does not replicate to branch DNS server

Field Summary

Conditional forwarder in AD does not replicate to branch DNS server is a AD-integrated DNS ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. Test by IP and by name so DNS is not confused with raw connectivity.