Active Directory Troubleshooting Assistant

Windows Server / Identity

Active Directory Assistant

Choose an AD symptom to get a structured diagnosis, safe diagnostic commands, expected results and next actions.

Problem

Diagnostic commands only. Validate the scope and permissions before making any production change.

Diagnostic

ScenarioHigh priority

Active Directory DNS

Typical symptoms

Slow or failed domain sign-in
Intermittent GPO processing
AD services cannot be located although IP connectivity works

Checks to perform

Confirm clients and DCs use only internal AD DNS servers
Test the domain and _msdcs zones
Check LDAP/Kerberos SRV records
Run DCDIAG DNS tests on the domain controllers

Diagnostic commands

ipconfig /all

nslookup -type=SRV _ldap._tcp.dc._msdcs.example.local

dcdiag /test:dns /e /v

Get-DnsClientServerAddress

Expected results / interpretation

Clients point to AD DNS, not directly to public resolvers
SRV records return the expected domain controllers
DCDIAG reports no blocking DNS failure

Next actions

Fix DHCP/DNS configuration before investigating higher AD layers
Remove stale records only after identifying the affected DC

Support the development of BAOI Hosting, domains and new IT resources.

❤️ Support BAOI