IT Toolbox Active Directory Assistant Windows Server / Identity Active Directory Assistant Choose an AD symptom to get a structured diagnosis, safe diagnostic commands, expected results and next actions. Problem Active Directory DNS→ AD replication→ GPO not applying→ Locked user account→ Broken workstation trust→ Cannot sign in to the domain→ Kerberos / time / SPN→ Domain controller certificate / LDAPS→ Domain controller unavailable→ SYSVOL / NETLOGON missing→ FSMO roles issue→ Cannot join a computer to the domain→ LDAP / LDAPS connectivity→ AD Sites & Services / subnet→ NTDS / AD DS service issue→ Active Directory DNSAD replicationGPO not applyingLocked user accountBroken workstation trustCannot sign in to the domainKerberos / time / SPNDomain controller certificate / LDAPSDomain controller unavailableSYSVOL / NETLOGON missingFSMO roles issueCannot join a computer to the domainLDAP / LDAPS connectivityAD Sites & Services / subnetNTDS / AD DS service issue Show diagnostic procedure Diagnostic commands only. Validate the scope and permissions before making any production change. Diagnostic