IT Procedures
Use structured field procedures for Windows, Active Directory, networking, FortiGate, email, backup, VMware, cybersecurity and infrastructure operations.
Add a new Active Directory site
Controlled procedure to add a new active site
ResourceAdd a node to a Proxmox cluster
Controlled procedure to add a node to a proxmox cluster
ResourceChange a public DNS record with rollback
Public DNS change procedure with TTL reduction, verifications and reverse plan
ResourceChange the password of a Windows service account
Controlled rotation procedure of an account used by several services or tasks
ResourceClean old Windows user profiles
Delete unused profiles properly without deleting data from a still active user
ResourceCollect technical data before incident escalation
Short procedure to collect exploitable information before d, climb an incident to another technician or publisher
ResourceConfigure a Backup Copy to a second site
Controlled procedure to configure a backup copy to a second site
ResourceConfigure secure scanning to an SMB folder
Procedure for setting up, a multifunction to deposit the freeways in an SMB sharing
ResourceConfigure SMTP email sending from a WordPress site
Configure WordPress SMTP with an authorized sender, safe Reply-To headers, TLS checks and verified SPF, DKIM and DMARC delivery results.
ResourceConfigure SPF, DKIM and DMARC for a domain
Configure SPF, DKIM and DMARC according to current standards: source inventory, single SPF, DARC RFC 9989 without pct, aggregate reports and validation in Augustation-2011s…
ResourceCreate a dedicated vMotion network
Controlled procedure to create a dedicated vmotion network
ResourceCreate a gMSA for a Windows service
Controlled procedure to create a gmsa for a Windows service
ResourceCreate a pilot Conditional Access policy
Controlled procedure to create a pilot policy
ResourceCreate a scheduled task to purge archived event logs
Automatically delete the too old EVTX archive without saturating the server disk
ResourceCreate a service account dedicated to SMB scanning
Avoid l, use of, a personal user account on multifunctions
ResourceCreate a VLAN on a FortiGate
Create a VLAN interface, its DHCP and the necessary policies without disrupting existing networks
ResourceCreate an external Hyper-V vSwitch
Controlled procedure to create an external hyper-v vswitch
ResourceCreate iSCSI storage with MPIO
Controlled procedure to create iscsi storage with mpio
ResourceDeploy a new VLAN in production
Deploy a VLAN through switches, gateway and DHCP, then validate pilot connectivity, firewall segmentation and a controlled rollback.
ResourceDeploy an Intune compliance policy
Controlled procedure for deploying an intune compliance policy
ResourceDeploy BitLocker with key backup
Controlled procedure to deploy bitlocker with key backup
ResourceDeploy DMARC in reject mode
Controlled procedure to set up dmarc in the mundane mode
ResourceDeploy MTA-STS and TLS-RPT
Controlled procedure to deploy mta-sts and tls-rpt
ResourceDeploy Windows Autopilot
Prepare a traditional Windows Autopilot pilot, register hardware correctly and verify profile assignment, Entra join, Intune enrollment and required apps.
ResourceDeploy Windows LAPS
Deploy Windows LAPS to an AD DS pilot OU with scoped permissions, encryption settings, password backup, recovery and rotation checks.
ResourceDiagnose a Group Policy issue with GPResult
Diagnose Group Policy with the correct user/computer scope, GPResult reports, security and WMI filtering, and processing evidence before changing the GPO.
ResourceDiagnose a rejected email in SMTP
Diagnosing SMTP rejection from the exact code: server that refuses, 4xx/5xx, authentication, TLS, sender, recipient, DNS, SPF/DKIM/DMARC, reputation and minimum test
ResourceDiagnose a slow Windows computer
Identify saturated resource and recurring causes before launching random cleanups
ResourceDiagnose a VSS backup error
Control the writers, services, snapshots space and events before restarting Acronis or Veeam
ResourceDiagnose an inaccessible TCP port
Check the network path, l, service listening and firewalls when an application does not join a server
ResourceDiagnose an IPsec tunnel on FortiGate
Identify a Phase 1, Phase 2, routing or political failure on a site-to-site tunnel
ResourceDiagnose degraded Active Directory replication
Structured procedure before intrusive action on domain controllers
ResourceDiagnose slow or unresponsive Outlook
Diagnose slow or frozen classic Outlook: compare webmail, add-ins, data files, profiles and indexing while preserving local and server data.
ResourceDiagnose unstable Wi-Fi on Windows
Analyze signal quality, pilot, band used and intermittent cuts
ResourceEnable DHCP Snooping on a switch
Controlled procedure to activate dhcp snooping on an switch
ResourceEnable Secure Boot across a Windows fleet
Enable Secure Boot with a hardware pilot, system-disk checks, BitLocker recovery planning and verification of startup and certificate status.
ResourceEnable SMB Signing in a Windows environment
Pilot SMB signing on Windows clients and servers, verify effective policy and test file access, NAS, scan-to-folder and application compatibility.
ResourceFix an SMTP 550 Sender mismatch error
Line up the address d, shipping with the authorized SMTP account, especially on WordPress and hosted relays
ResourceGradually migrate Wi-Fi from WPA2 to WPA3
Controlled procedure to migrate a wpa2 wi‐fi to wpa3 gradually
ResourceHandle a saturated Linux filesystem without risky deletion
Procedure to find the cause of a full filesystem before cleaning
ResourceHandle a VMware VM with an inconsistent snapshot chain
Secure the VM and analyze descriptors when a parent of the company is missing or disabled
ResourceIIS: renew and replace an HTTPS certificate
Procedure for replacing an HTTPS certificate on IIS with validation of the AB and chain
ResourceImplement a 3-2-1 backup strategy
Design multiple copies, on separate media, with at least one external or isolated copy
ResourceManage a Hyper-V checkpoint safely
Controlled procedure to properly manage a hyper-v
ResourceModify a FortiGate IPsec tunnel with a rollback plan
Controlled change method of a site-to-site tunnel
ResourceOffboard an Intune device
Controlled procedure to overboard an intune device
ResourceOrganize a backup restore test
Test a real backup restore in an isolated target, validate the application and compare recovery time and recovered data with RTO and RPO.
ResourcePrepare a OneDrive to SharePoint migration
Controlled procedure to prepare a 1-Wildl migration to sharepoint
ResourceProperly decommission a domain controller
Procedure for removing a domain controller without leaving DNS, DHCP, PKI or applications dependencies
ResourceProperly offboard a Microsoft 365 user
User departure procedure by preserving data, access and traceability
ResourceProtect an API with rate limiting
Controlled procedure to protect an api per spleen limit
ResourceRecover a Docker service stuck in a restart loop
Diagnose a Docker restart loop using logs, exit state, memory and dependency evidence while preserving volumes and the deployment configuration.
ResourceRedirect an old domain to a new WordPress site
Set up 30-folded Drains by keeping the paths and avoiding loops
ResourceRenew a RADIUS / 802.1X certificate
Procedure for renewing a server certificate used by the 802.1X authentication
ResourceRenew a TLS certificate without interruption
Renew a TLS certificate by checking names, trust and key association, switching the intended listeners and validating real client access with a valid rollback.
ResourceRepair Windows system files with DISM and SFC
Use Microsoft tools in the correct order to check and then repair the image and system files
ResourceResolve a VMDK "capacity was reduced" error
Diagnosing a VMDK replication error indicating reduced capacity by comparing source, target, philosophies, descriptors and modification history before properly recreate the string if necessary
ResourceResolve an automatic IP address or unavailable DHCP issue
Diagnose APIPA and missing DHCP leases through adapter, VLAN, relay, scope and DORA checks with a controlled pilot renewal.
ResourceRespond to a suspected compromised Microsoft 365 account
Contain a suspected Microsoft 365 account compromise, review sign-ins and persistence, and validate recovery before re-enabling access.
ResourceRespond to fraudulent connection attempts on a VPN
Block sources, check for success and strengthen the, access to the RSS file without limiting yourself to IP addresses
ResourceSecure a compromised WordPress site
Keep it up, incident, preserve the evidence, clean the files and prevent a new Emma
ResourceSecure a nearly full VMware datastore
Procedure to avoid a failure due to saturation of a data store
ResourceSecure administrator access
Set up nominal accounts, MFA, separation of usage and procedures, emergency
ResourceSet up a systemd timer
Controlled procedure to set up a systemd timer
ResourceSet up an immutable backup repository
Plan a Veeam Linux hardened repository, validate product-managed immutability and restricted administration, then prove recovery using an isolated restore.
ResourceSet up RADIUS access control for a VPN
Controlled procedure to set up a XXVI control for a vpn
ResourceSite-to-site VPN incident: collect diagnostics and restore service
Structured procedure to diagnose an IP tunnel in the yearsec site-to-site unavailable without multiplying the changes
ResourceSolve a DNS problem on Windows
Diagnose Windows DNS with resolver-specific queries, suffix and Hosts checks, cache evidence, timing and bounded network tracing.
ResourceSolve a fatal WordPress error
Recover WordPress from a fatal error using PHP evidence, Recovery Mode, targeted component isolation and a verified rollback without exposing debug output.
ResourceWindows Server: handle a saturated system disk
Risk reduction procedure when a Windows Server system volume lacks d,space