Practical Fixes for Real-World IT Problems
IT Troubleshooting
IT troubleshooting is rarely about knowing one magic command. Most of the time, it is about narrowing the problem down, proving what is working, eliminating what is not, and resisting the temptation to change five things at once.
This section of RootNotebook is where I collect practical troubleshooting notes from problems I have actually worked through: Windows issues, network problems, Linux services, hardware failures, virtualization, Microsoft environments, strange application behavior, and the occasional problem that makes absolutely no sense until it suddenly does.
I have spent much of my career troubleshooting systems. Sometimes that means working through a complicated infrastructure problem. Other times it means discovering that the cable is bad, the service stopped, DNS is pointing somewhere it should not, or somebody changed something and forgot to mention it.
The goal here is not to create another collection of generic “restart your computer” articles. These are meant to be useful references built around the troubleshooting process itself.
Start With the Problem, Not the Solution
One of the easiest mistakes in IT is deciding what the problem is before gathering enough information.
If someone says:
“The Internet is down.”
That could mean:
- One website does not load.
- DNS resolution is failing.
- The computer lost its IP address.
- Wi-Fi disconnected.
- The gateway is unreachable.
- The ISP is down.
- A firewall rule changed.
- The browser itself is broken.
- The user clicked the wrong shortcut.
Those are very different problems.
Before making changes, I try to establish exactly what is failing.
My Basic Troubleshooting Process
1. Reproduce the Problem
Whenever possible, I want to see the problem myself.
What exactly happens?
Is there an error message?
Does it happen every time?
Is it affecting one user, one computer, one department, or everybody?
That distinction can eliminate a lot of possibilities immediately.
2. Determine the Scope
Scope is one of the fastest ways to narrow a problem.
If one computer cannot reach a server but twenty others can, I probably should not start troubleshooting the server.
If nobody in the building can reach it, the situation changes completely.
I usually try to determine whether the problem affects:
- One application
- One user
- One workstation
- One subnet or VLAN
- One server
- One location
- The entire environment
Check the Simple Things First
Experienced IT people sometimes make troubleshooting harder than it needs to be.
Before digging through packet captures or event logs, check the obvious things.
Is the cable connected?
Does the machine have an IP address?
Can it reach the default gateway?
Is the service running?
Is the disk full?
Did the password expire?
Was there an update?
Did somebody reboot something?
The simple checks are not beneath you. They are part of eliminating possibilities quickly.
Change One Thing at a Time
This is one of my biggest troubleshooting rules.
If you change the DNS settings, restart three services, modify the firewall, reinstall the application, and reboot the server all at once, you may fix the problem.
You just will not know what fixed it.
Make a change, test it, and record the result.
That makes troubleshooting repeatable instead of becoming a guessing game.
Windows Troubleshooting
Windows problems can come from dozens of places, but several tools consistently help narrow things down.
Common tools and commands include:
ipconfig
ping
nslookup
tracert
netstat
route print
net use
tasklist
taskkill
sc
Get-Service
Get-Process
Test-NetConnection
Event Viewer is also one of the first places I look when an application, service, driver, or scheduled task behaves unexpectedly.
This section will include troubleshooting notes for things such as:
- Windows 11
- Services
- Network drives
- Printers
- Windows Update
- Event Viewer
- Remote Desktop
- Permissions
- User profiles
- Active Directory
- DNS
- DHCP
- PowerShell
- Microsoft 365
Network Troubleshooting
Networking problems become much easier when you work through the layers instead of jumping directly to the firewall.
A basic sequence might be:
- Does the interface have a valid IP address?
- Can the machine reach itself?
- Can it reach another device on the local network?
- Can it reach the default gateway?
- Can it reach an external IP address?
- Can it resolve DNS names?
- Can it reach the required destination and port?
That sequence helps separate a connectivity problem from a DNS problem or an application problem.
Useful tools include:
ping
traceroute / tracert
nslookup
dig
arp
route
netstat
ss
tcpdump
Wireshark
Sometimes a packet capture answers a question in thirty seconds that would otherwise take an hour of guessing.
Linux Troubleshooting
Linux troubleshooting usually starts with determining whether the service is actually running and what the logs are saying.
Commands I commonly reach for include:
systemctl status
journalctl
ps
top
df -h
free -h
ip addr
ip route
ss -tulpn
dmesg
lsblk
mount
Permissions, ownership, service configuration, storage, networking, and dependency problems account for a large percentage of the issues I run into.
The logs normally tell you something. The trick is learning which log matters.
Hardware Troubleshooting
Hardware problems can imitate software problems surprisingly well.
A failing drive may look like an operating-system issue.
A damaged network cable may look like a firewall problem.
Bad memory can produce errors that appear completely unrelated.
Power problems can create intermittent failures that disappear the moment you start troubleshooting them.
Hardware troubleshooting may involve:
- Power supplies
- Memory
- Storage
- Network adapters
- Cabling
- Switch ports
- Displays
- Printers
- USB devices
- Batteries
- Temperature
- Firmware
The basic rule remains the same: isolate the component and test one variable at a time.
Logs Are Evidence
One of the most important habits I have developed is looking at logs before making assumptions.
Windows Event Viewer, Linux journals, firewall logs, application logs, SIEM events, authentication records, and network captures all provide evidence about what happened.
Sometimes the error message that looks meaningless at first turns out to be the entire answer.
That is also why I try to save interesting failures when I encounter them. The problem may happen again six months later.
Document the Fix
A problem is not completely solved until I know how it was solved.
Whenever something unusual happens, I try to record:
- The symptoms
- The environment
- The error
- What I tested
- What did not work
- What finally worked
- Commands used
- Configuration changes
- Anything I would do differently next time
That is essentially what this section of RootNotebook is for.
Some of these articles may be long. Others may only document a single command or strange error.
If it solved a real problem and I think I might need the answer again someday, it belongs here.
Troubleshooting Guides
This page will grow as I add troubleshooting notes and real-world fixes covering:
- Windows
- Linux
- Networking
- Active Directory
- DNS and DHCP
- Microsoft 365
- Virtualization
- Hardware
- Raspberry Pi
- Servers
- Security tools
- Applications and services
- Printers and peripherals
- Remote access
- Backup and recovery
Most of these started the same way:
Something stopped working, and I needed to figure out why.