Group Policy maps drives or printers inconsistently
Review OU placement, policy scope, security filtering, DNS, client gpresult and event logs, then document the corrected baseline.
Case Scenarios
Symptoms and investigation directions
These examples are anonymized. The actual method, scope and change plan depend on the customer environment and business impact.
A Horizon VDI data-drive root cannot create files
Compare share and NTFS permissions, root-folder inheritance, user profile behavior and the intended boundary between creating folders and saving files.
Remote access connects but ERP and shares are unreachable
Check DNS, routing, firewall policy, server gateways, return paths and application dependencies instead of treating the VPN tunnel alone as proof of access.
Former employees retain access and departments have excessive rights
Inventory accounts and groups, remove stale permissions, separate read and modify roles, and retain an auditable access matrix.
NAS snapshots exist but there is no independent backup
Review snapshot retention, replication, independent copies, recovery objectives and restore testing so storage failure does not remove every recovery path.
SQL Server log growth stops ERP writes
Check recovery model, log backups, long transactions, disk capacity and log-reuse waits before using shrink as a controlled exception.
A legacy Windows Server or ERP system cannot be safely stopped
Create recoverable backups or images, identify dependencies, test migration and define rollback before touching the only production copy.
Office, live streaming and cross-region traffic interfere
Separate workloads with Multi-WAN, SD-WAN, QoS and policy routing, then monitor the selected path and failover behavior.
Sites are connected but cross-domain sharing fails
Review routing, firewall ports, DNS conditional forwarding, domain trust, time synchronization and resource permissions.
USB must be controlled without blocking every workstation
Apply role-based endpoint policy, documented exceptions, audit trails and a controlled process for temporary access.
TrueNAS capacity grows but storage and permissions are unclear
Review ZFS pools, datasets, quotas, SMB ACLs, snapshots, replication, capacity forecasts and virtualization integration.
A network remediation project has no handover records
Create topology, IP and VLAN plans, firewall and account records, backups, change evidence, test results, acceptance and rollback documents.