{"id":10992,"date":"2025-12-24T23:33:12","date_gmt":"2025-12-25T04:33:12","guid":{"rendered":"https:\/\/stevepedwards.today\/DebianAdmin\/?p=10992"},"modified":"2025-12-24T23:33:19","modified_gmt":"2025-12-25T04:33:19","slug":"l1-support-expectations-in-a-windows-server-domain","status":"publish","type":"post","link":"https:\/\/stevepedwards.today\/DebianAdmin\/l1-support-expectations-in-a-windows-server-domain\/","title":{"rendered":"L1 Support Expectations in a Windows Server Domain"},"content":{"rendered":"
<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n

Basic L1 Support Expectations in a Windows Server Domain<\/strong><\/p>\n

An L1 Support Tech is the \"first line of defence,\" focusing on identity, connectivity, and basic resource access.<\/p>\n

Identity & User Management (Active Directory)<\/strong><\/p>\n

These are performed using Active Directory Users and Computers (ADUC)<\/strong>.<\/p>\n

    \n
  1. Reset a User Password:<\/strong> Providing a temporary password and forcing a \"change at next logon.\"<\/li>\n<\/ol>\n

    <\/p>\n

    <\/p>\n

    <\/p>\n

    Advanced L2-3 Support - Group policy created to allow Domain Users to login to domain joined PCs without having to be in local PC RDP group first:<\/p>\n

    <\/p>\n

      \n
    1. Unlock\/Freeze an Account:<\/strong> Checking the \"Unlock\" box or using \"Account is Disabled\" for terminations\/freezes.<\/li>\n<\/ol>\n

      <\/p>\n

        \n
      1. Create a New Domain User:<\/strong> Setting up the username, UPN (email style), and initial password.<\/li>\n<\/ol>\n

        R Click User:<\/p>\n

        <\/p>\n

        Always use Change Password at next logon \u2013 available when Password Never Expires unchecked<\/p>\n

          \n
        1. Modify Group Membership:<\/strong> Adding a user to a department group (e.g., \"Accounting\") to give them folder access.<\/li>\n<\/ol>\n

          <\/p>\n

            \n
          1. Modify User Attributes:<\/strong> Updating phone numbers, job titles, or office locations in the \"Properties\" tab.<\/li>\n<\/ol>\n

            <\/p>\n

            ? File & Resource Access<\/strong><\/p>\n

              \n
            1. Check NTFS Permissions:<\/strong> Right-clicking a folder to see who has \"Read\" vs. \"Modify\" access.<\/li>\n<\/ol>\n

              <\/p>\n

                \n
              1. Identify Open Files:<\/strong> Using Server Manager > Files and Storage Services<\/strong> to see which user has a specific file locked.<\/li>\n<\/ol>\n

                <\/p>\n

                  \n
                1. Manage a Print Queue:<\/strong> Clearing stuck documents from a server-hosted printer.<\/li>\n<\/ol>\n

                  The \"Manual Purge\" (Most Effective)<\/strong><\/p>\n

                  If restarting the spooler doesn't work, it\u2019s because the .SHD (shadow) and .SPL (spool) files are still sitting in the system folder.<\/p>\n

                    \n
                  1. Stop the Spooler:<\/strong> net stop spooler (via Admin CMD).<\/li>\n
                  2. Clear the Folder:<\/strong> Navigate to: C:\\Windows\\System32\\spool\\PRINTERS<\/li>\n<\/ol>\n

                    <\/p>\n

                      \n
                    1. Delete Everything:<\/strong> Delete every file inside this folder. These are the \"ghosts\" of the stuck documents.<\/li>\n
                    2. Start the Spooler:<\/strong> net start spooler.\n