Practical guides for system administrators — Windows, PowerShell, Active Directory, networking, and infrastructure.
After installing the April 2026 Windows security update, users started seeing a new dialog every time they open an .rdp file — a warning titled Caution: Unknown remote connection with checkboxes for drives, clipboard, and other local resources. Nothing broke.…
Network scanning on Windows usually means installing something or switching to Linux. nmap breaks that assumption — it runs natively on Windows, installs in two minutes, and gives you the same scanning capabilities available on any Linux box. For a…
Every Windows administrator knows ipconfig It is usually the first command run when something on the network stops working. But ipconfig does more than display adapter information — it can flush the DNS cache, force a DHCP lease renewal,…
Checking whether a port is open — on the local machine or on a remote server — comes up in almost every troubleshooting scenario involving services, firewalls, or application connectivity. Windows has two built-in tools for this: netstat in CMD…
When something goes wrong on a Windows machine — a service crash, a failed login, an unexpected reboot — the answer is usually in the Event Log. wevtutil lets you query, filter, export, and clear Event Logs entirely from the…
When a Group Policy setting is not applying as expected — a drive mapping is missing, a software restriction is not enforced, a desktop lockdown is not working — the question is always the same: which GPOs actually applied to…
NTFS permissions control who can read, write, and execute files and folders on Windows. icacls is the command-line tool for viewing and modifying those permissions — without opening File Explorer, without clicking through security dialogs, and without needing a GUI…
Event Viewer is fine for occasional manual checks. It breaks down the moment you need to search across multiple machines, filter by time range, correlate events by ID, or automate any part of the process. Get-WinEvent is the PowerShell cmdlet…
XCOPY has been part of Windows since DOS. Robocopy shipped with Windows Server 2003 Resource Kit and became a standard OS component in Vista. For most file copy tasks today, Robocopy is the right choice — but XCOPY is still…
Robocopy does not use a standard pass/fail exit code. It uses a bitmask — a number where each bit represents a different outcome, and multiple bits can be set at the same time. This means a non-zero exit code does…
