ChecklistRemote AccessRead-only
RDP Connectivity Checklist
A structured check for RDP failures before changing firewall rules, user rights, or server policy.
Toolchest Topic
Guided Drills
Step-by-step validation drills for backup restores, access checks, readiness checks, and other proof work.
Use this lane when you already understand the problem space and need the reusable operator asset, not just the concept page.
TemplateBackup and RecoveryChanges system state
Backup Restore Drill Evidence Checklist
A restore-drill evidence template for proving backups are usable, measuring recovery time, and turning failed assumptions into repair tasks before an outage.
ChecklistPatchingReview before running
Windows Update Repair Checks
A staged Windows Update troubleshooting path that starts read-only and escalates only when needed.
ChecklistPatch and Reboot ReadinessChanges system state
Windows Update readiness and repair evidence pack
A patch readiness and repair evidence pack for reboot state, servicing health, update logs, and approved repair actions.
ChecklistHybrid Cloud OperationsRead-only
Azure Arc onboarding preflight checklist
Preflight checklist for onboarding Windows servers to Azure Arc. Confirms supported OS state, outbound connectivity, proxy/TLS behavior, local admin rights, target Azure placement, tagging, pilot scope, and rollback notes before any agent install.
ChecklistActive Directory and IdentityChanges system state
Inactive AD user disable review workflow
Two-phase review checklist for identifying inactive AD user accounts, validating inactivity evidence, applying exclusions, capturing approval, and preparing rollback details before any disable action.
ChecklistApplication HostingRead-only
Internal IIS site rollout checklist
Operator checklist for launching an internal IIS-hosted site with evidence capture for IIS role presence, site folder layout, bindings, app pool identity, DNS readiness, browser validation, and rollback notes.
ChecklistDNS and DHCPRead-only
DNS and DHCP Health Check
A read-only two-client DNS failure workflow that collects the same evidence on the affected and known-good Windows clients, compares suffix, resolver, cache, and query paths side by side, and narrows the first actual delta before any reset.
ChecklistActive Directory and IdentityRead-only
SMB working-user vs failing-user access comparison
Compare a working and failing user's identity, token, Kerberos, share ACL, NTFS ACL, inheritance, and effective-access path to identify the first authorization delta before changing permissions.
ChecklistPatch and Reboot ReadinessChanges system state
Windows Server update failure evidence-first runbook
A Windows Server-specific observe, compare, repair, validate workflow for one server that fails a monthly update while a peer succeeds, with proxy, update-source, servicing, applicability, CBS/DISM, and before/after evidence.
ChecklistActive Directory and IdentityChanges system state
Service account retirement evidence workflow
Combine configuration discovery with runtime authentication evidence, SPN/Kerberos review, owner approval, an observation window, and explicit DISABLE / HOLD / ROLLBACK criteria before retiring a domain service account.
ChecklistMonitoring and ObservabilityPlanning aid
Internal URL monitoring deployment and trust runbook
One authoritative path for monitoring 10–20 internal HTTP/HTTPS endpoints: define endpoint semantics, deploy Uptime Kuma, set retry and maintenance policy, add TLS/auth checks, alert, retain history, and prove the monitor with a controlled outage.
ChecklistMigration and CutoverChanges system state
Primary workflow: Robocopy migration cutover evidence pack
The primary production file-migration workflow: plan, dry-run, pre-seed, freeze writes, final delta, validate data/metadata/access, and make an explicit GO / STOP / ROLLBACK decision before the destination becomes authoritative.
TemplateBackup and RecoveryPlanning aid
Backup restore drill evidence record
A ready-to-fill restore-test record with scope, isolated restore evidence, application/data validation, measured RPO/RTO, failures, assumptions, cleanup, owner signoff, and a management/change summary.