Technician operations reference

Find the right Windows fix before the ticket gets old.

Client and Server commands, PowerShell, Registry repair, Microsoft 365 troubleshooting, known issues, and trusted downloads—organized for working technicians.

62 references shownSource-reviewed Aug 29, 2026
Official sources prioritized Risky actions labeled One-click command copy

Technician coverage

One field reference across the Microsoft stack.

01

Windows Client

Windows 10 and 11 repair, networking, drivers, deployment, update health, and security.

02

Windows Server

Server 2016–2025 roles, Active Directory, Group Policy, storage, services, and replication.

03

PowerShell & Registry

Automation-ready cmdlets plus controlled Registry changes with backup and rollback steps.

04

Microsoft 365

Identity, activation, Outlook, Teams, Entra registration, licensing, and supported diagnostics.

Command library

Search, filter, copy, run.

Microsoft command reference ↗
ipconfig /allNetwork

Show full IP, DNS, DHCP, and adapter configuration.

C:\>ipconfig /all
ipconfig /flushdnsNetworkAdmin

Clear the local DNS resolver cache.

C:\>ipconfig /flushdns
pingNetwork

Test whether a host is reachable and measure response time.

C:\>ping 8.8.8.8
tracertNetwork

Trace the network path to a destination.

C:\>tracert microsoft.com
pathpingNetwork

Combine route tracing with packet-loss and latency analysis.

C:\>pathping microsoft.com
nslookupNetwork

Query DNS servers and inspect DNS records.

C:\>nslookup microsoft.com
netstat -anoNetworkAdmin

List active connections, listening ports, and process IDs.

C:\>netstat -ano
getmacNetwork

Display MAC addresses for installed network adapters.

C:\>getmac /v
arp -aNetwork

Display the local ARP cache.

C:\>arp -a
route printNetwork

Display the IPv4 and IPv6 routing tables.

C:\>route print
sfc /scannowRepairAdmin

Scan and repair protected Windows system files.

C:\>sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealthRepairAdmin

Repair the local Windows component store.

C:\>DISM /Online /Cleanup-Image /RestoreHealth
chkdskDiskAdmin

Check a volume for file-system errors.

C:\>chkdsk C: /scan
diskpartDiskAdminCaution

Open the disk and partition administration console.

C:\>diskpart
fsutilDiskAdminCaution

Run advanced file-system and volume operations.

C:\>fsutil fsinfo drives
robocopyFiles

Reliably copy or mirror files and directory trees.

C:\>robocopy C:\Source D:\Backup /E /R:2 /W:2
xcopyFiles

Copy files and directory trees using legacy-compatible switches.

C:\>xcopy C:\Source D:\Backup /E /I
takeownSecurityAdminCaution

Take ownership of a file or directory.

C:\>takeown /F C:\Path /R /D Y
icaclsSecurityAdminCaution

View or modify file and folder permissions.

C:\>icacls C:\Path
cipherSecurityCaution

View or change EFS encryption and securely overwrite free space.

C:\>cipher /c C:\Path\file.txt
whoami /allSecurity

Show the current identity, groups, privileges, and SID.

C:\>whoami /all
systeminfoSystem

Display operating system, hotfix, memory, and hardware details.

C:\>systeminfo
driverquerySystem

List installed drivers and their properties.

C:\>driverquery /v
tasklistProcesses

List running processes.

C:\>tasklist /svc
taskkillProcessesCaution

Stop a process by name or process ID.

C:\>taskkill /IM notepad.exe /F
sc queryServicesAdmin

Query Windows services and driver services.

C:\>sc query type= service state= all
schtasks /querySystem

List scheduled tasks and their status.

C:\>schtasks /query /fo LIST /v
gpresultPolicy

Show the Resultant Set of Policy applied to a user or computer.

C:\>gpresult /r
gpupdate /forcePolicyAdmin

Refresh computer and user Group Policy settings.

C:\>gpupdate /force
wevtutilLogsAdminCaution

Query, export, clear, and configure Windows event logs.

C:\>wevtutil el
findstrFiles

Search files or command output using text or regular expressions.

C:\>findstr /S /I error *.log
whereFiles

Locate executables or files using the current path or a pattern.

C:\>where powershell.exe
dirFiles

List files and folders in a directory.

C:\>dir C:\Windows /a /o:n
treeFiles

Display a directory structure as a text tree.

C:\>tree C:\Projects /F
assocFiles

Show or change file-extension associations.

C:\>assoc .txt
ftypeFiles

Show or change commands associated with registered file types.

C:\>ftype txtfile
setxSystemCaution

Persist an environment variable for future sessions.

C:\>setx TOOL_PATH C:\Tools
shutdownSystemCaution

Shut down, restart, or sign out a local or remote computer.

C:\>shutdown /r /t 60
bcdeditBootAdminCaution

View or modify boot configuration data.

C:\>bcdedit /enum
manage-bdeSecurityAdminCaution

Inspect and administer BitLocker Drive Encryption.

C:\>manage-bde -status
pnputilDriversAdminCaution

Add, remove, export, and enumerate driver packages.

C:\>pnputil /enum-drivers
powercfgSystemAdmin

Inspect power plans, battery reports, and sleep capabilities.

C:\>powercfg /batteryreport
net userAccountsAdminCaution

View and administer local user accounts.

C:\>net user
query userAccounts

Show interactive user sessions on a computer.

C:\>query user
klistSecurity

Display or purge Kerberos tickets.

C:\>klist
certutilSecurityCaution

Inspect certificates, hashes, and certification services data.

C:\>certutil -hashfile installer.exe SHA256
wingetSoftware

Search, install, upgrade, and remove packages with Windows Package Manager.

C:\>winget upgrade --all
Get-NetIPConfigurationPowerShell

Show network adapter, address, gateway, and DNS configuration in PowerShell.

C:\>Get-NetIPConfiguration -Detailed
Test-NetConnectionPowerShell

Test reachability, TCP ports, routes, and name resolution from PowerShell.

C:\>Test-NetConnection server01 -Port 443
Get-WinEventPowerShellAdmin

Query modern Windows event logs with efficient filters.

C:\>Get-WinEvent -LogName System -MaxEvents 50
Get-ServicePowerShell

List and filter Windows services from PowerShell.

C:\>Get-Service | Where-Object Status -eq 'Stopped'
Get-ComputerInfoPowerShell

Collect operating system, firmware, hardware, and update information.

C:\>Get-ComputerInfo
Test-ComputerSecureChannelPowerShellAdminCaution

Test or repair a workstation's trust relationship with its domain.

C:\>Test-ComputerSecureChannel -Verbose
Get-WindowsFeatureServerAdmin

List installed and available Windows Server roles and features.

C:\>Get-WindowsFeature | Where-Object Installed
Install-WindowsFeatureServerAdminCaution

Install Windows Server roles, role services, or features.

C:\>Install-WindowsFeature Web-Server -IncludeManagementTools
dcdiagServerAdmin

Run domain-controller health and Active Directory diagnostic tests.

C:\>dcdiag /v /c /e
repadminServerAdminCaution

Diagnose and administer Active Directory replication.

C:\>repadmin /replsummary
reg queryRegistry

Read Registry keys and values locally or remotely.

C:\>reg query HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion /v ProductName
reg exportRegistryAdmin

Back up a Registry key to a .reg file before making changes.

C:\>reg export HKLM\SOFTWARE\Vendor C:\Backup\Vendor.reg /y
reg addRegistryAdminCaution

Create or modify a Registry key or value.

C:\>reg add HKLM\SOFTWARE\Vendor /v Setting /t REG_DWORD /d 1 /f
dsregcmd /statusMicrosoft 365

Inspect Microsoft Entra join, device registration, SSO, and tenant state.

C:\>dsregcmd /status
GetHelpCmd.exeMicrosoft 365AdminCaution

Run supported Microsoft 365 troubleshooting scenarios from an elevated terminal.

C:\>GetHelpCmd.exe -S ResetOfficeActivation -AcceptEula -CloseOffice

No command found

Try a broader term or choose All categories.

Diagnostic playbooks

Start with the safest proven path.

Confirm scope, preserve rollback, change one variable, and record the result.

01

System files are corrupt

Low risk

Crashes, missing components, or Windows features failing

  1. Run DISM /Online /Cleanup-Image /RestoreHealth as administrator
  2. Run sfc /scannow
  3. Restart and retest
02

DNS works intermittently

Low risk

Sites fail by name but network connectivity remains

  1. Run ipconfig /flushdns
  2. Run ipconfig /registerdns
  3. Verify the configured DNS servers with ipconfig /all
03

Windows Update is failing

Medium risk

Update errors, stalled downloads, or repeated rollback

  1. Check the official Windows release-health page
  2. Run the built-in Windows Update troubleshooter
  3. Repair the component store before resetting update services
04

A file is locked by an unknown process

Medium risk

Rename, move, or delete reports that the file is in use

  1. Use Microsoft Process Explorer or Handle
  2. Identify the owning process
  3. Close the application or stop the process only after validating impact
05

Domain trust relationship failed

Medium risk

A workstation reports that its trust relationship with the domain failed

  1. Confirm DNS points to an Active Directory DNS server
  2. Run Test-ComputerSecureChannel -Verbose
  3. Use the -Repair option with approved domain credentials only after validating the computer account
06

Office activation or sign-in loop

Medium risk

Microsoft 365 Apps repeatedly request sign-in or report activation problems

  1. Check service health and license assignment
  2. Capture dsregcmd /status and confirm Entra registration state
  3. Use Microsoft's supported Get Help activation-reset scenario if identity and licensing are correct
07

Registry change is required

High risk

A verified vendor or Microsoft fix requires modifying a Registry value

  1. Confirm the exact Windows build and Registry path
  2. Export the affected key before changing it
  3. Record the old value, apply the minimum change, and define a rollback test
08

Server role state is unclear

Medium risk

A role, feature, or management tool is missing or partially installed

  1. Run Get-WindowsFeature and capture the current state
  2. Confirm prerequisites and source availability
  3. Install only the required feature and include management tools when needed

Copy-ready repairs

Supported commands, with context.

Read the impact note first. Every entry links to Microsoft documentation.

Microsoft documented

Repair Windows image and system files

Use when protected files or Windows components appear damaged.

DISM.exe /Online /Cleanup-Image /RestoreHealth
sfc /scannow

Run in this order from an elevated terminal, then restart and retest.

Microsoft procedure ↗
Microsoft documented

Reset the TCP/IP and DNS client stack

Use after documenting the current adapter, VPN, proxy, and static-IP settings.

netsh winsock reset
netsh int ip reset
ipconfig /release
ipconfig /renew
ipconfig /flushdns

Restart afterward. Network security, VPN, or proxy software may need repair if it stops working.

Microsoft procedure ↗
Microsoft documented

Clear a stuck print queue

Use when jobs remain stuck after normal cancellation and a spooler restart.

net stop spooler
del /Q /F %systemroot%\System32\spool\PRINTERS\*
net start spooler

This removes every queued print job on the computer. Run elevated only after confirming that impact.

Microsoft procedure ↗
Microsoft documented

Capture recent System errors

Create a focused diagnostic view before changing drivers or services.

Get-WinEvent -FilterHashtable @{LogName='System'; Level=1,2,3; StartTime=(Get-Date).AddHours(-24)} | Select-Object TimeCreated,Id,ProviderName,Message | Format-List

PowerShell diagnostic only; it does not modify the machine.

Microsoft procedure ↗

Compatibility watch

Verified conflicts and known Windows issues.

Status reflects published guidance reviewed August 29, 2026. Re-check the source before field work.

Resolved or mitigated Still investigating Primary-source evidence
inpoutx64 / RGB utilities

RGB control driver can crash or freeze games

Mitigated
Affected
Windows 11 24H2 and 25H2
Symptom
ARC Raiders, MARVEL Tōkon, or THE FINALS may stop responding, crash, or restart Windows when a blocked inpoutx64 driver is present.
Technician action
Restart to receive Microsoft's driver block. If a technician must disable the driver manually, back up the Registry and set HKLM\SYSTEM\CurrentControlSet\Services\inpoutx64\Start to 4, then restart.
Microsoft verifiedView source ↗
Intel SST / IntcAudioBus.sys

Intel Smart Sound Technology upgrade blue screens

Resolved by driver
Affected
Windows 11 24H2 on some 11th Gen Intel systems
Symptom
Devices with Intel SST driver 10.29.0.5152 or 10.30.0.5152 can blue-screen during or after the feature update.
Technician action
Install Intel SST driver 10.30.00.5714 or later, or 10.29.00.5714 or later, through Windows Update or the PC maker, restart, then retry the upgrade.
Microsoft verifiedView source ↗
Dirac Audio / cridspapo.dll

Dirac Audio component can remove sound

Resolved by driver
Affected
Windows 11 24H2
Symptom
Integrated speakers, Bluetooth speakers, or Bluetooth headsets may stop producing sound after the upgrade.
Technician action
Install the replacement audio driver offered through Windows Update. Do not force the feature update around a safeguard hold.
Microsoft verifiedView source ↗
SenseShield / sprotect.sys

SenseShield driver can make devices unresponsive

Resolved by software update
Affected
Windows 11 24H2
Symptom
Security or encryption software using the older sprotect.sys driver can cause a blue/black screen or a nonresponsive system.
Technician action
Update the associated application and driver to the vendor's current release before attempting the Windows feature update.
Microsoft verifiedView source ↗
Third-party wallpaper/customization software

Wallpaper customization apps can break desktop behavior

Vendor update required
Affected
Windows 11 24H2
Symptom
Wallpaper apps may fail to launch, icons may disappear, or desktop and virtual-desktop functions may behave incorrectly.
Technician action
Update the customization app to a compatible release or uninstall it before upgrading. Avoid bypassing an active compatibility hold.
Microsoft verifiedView source ↗
Intel Innovation Platform Framework driver

Dell performance regression after a Windows update

Resolved by update
Affected
Select Dell models on Windows 11 24H2
Symptom
Some systems experienced unusually poor performance after the June 2026 Windows update.
Technician action
Install KB5121767 or a later cumulative update and the current Dell/Intel platform drivers, then restart and verify performance.
Microsoft verifiedView source ↗
Windows mouse settings

Mouse preferences revert after KB5120998

Investigating
Affected
Windows 11 24H2 and 25H2
Symptom
Pointer, button, scrolling, or other mouse customization settings can revert after the August 27, 2026 update.
Technician action
Document the preferred settings and monitor Windows release health. No unsupported Registry workaround is recommended while Microsoft investigates.
Microsoft confirmedView source ↗
Microsoft Defender Antivirus

False Defender-off notification

Investigating
Affected
Multiple supported Windows client and Server releases
Symptom
Windows may report that Defender Antivirus is turned off even though protection remains active.
Technician action
Verify actual protection state in Windows Security or with Get-MpComputerStatus before taking remediation action; monitor release health for resolution.
Microsoft confirmedView source ↗

Official installation media

Windows ISOs without the sketchy mirror.

These buttons go to Microsoft landing pages. Microsoft media is not stored or repackaged here.

Licensing note: an ISO is installation media, not a license. Use a valid entitlement and verify the file or tool comes from Microsoft before deployment.

Trusted downloads

Go to the source, not a mirror.

Links open the publisher’s page; this site does not repackage installers.

Known issues & updates

Check Microsoft’s live release health before changing the machine.

Current Windows rollout status, safeguard holds, resolved issues, servicing milestones, and update history.

Open Windows release health ↗

Trust and transparency

How Twan’s WinFix publishes repairs.

About

Twan’s WinFix is an independent, technician-focused Windows reference built to shorten troubleshooting time. It is not affiliated with or endorsed by Microsoft.

Editorial standards

  • Microsoft and publisher documentation are prioritized.
  • Community findings are labeled and require corroboration.
  • Risk, administrator access, restart requirements, and rollback steps are disclosed.
  • Resolved and stale issues are reviewed monthly.

Privacy

This release does not require accounts and does not intentionally collect personal information. Standard hosting logs may record technical request data. A consent system will be added before analytics or personalized advertising is enabled.

Corrections and sponsorships

Corrections will be reviewed against primary sources. Future sponsored material will be clearly labeled and will not control repair conclusions, evidence ratings, or download placement.