MCSA/MCSE Troubleshooting 20 Questions

RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
I have an idea for a thread I think you guys will like. Back in the day I was jr. instructor at a company that offered classes for the MCSA/MCSE exams. One of the things I did, which the students really enjoyed, was to play a game similar to 20 questions. I would take situations from real life and the students would ask questions until they were able to figure out the solution to the problem. I think this a very good way for more experienced people to share with those who might be coming up through the ranks.
Here are the rules:
1. Be respectful of less experienced members. Do not spout out answers just because you think you know what is going on.
2. Ask questions before you offer an answer. ONE QUESTION AT A TIME.
3. Wait 24 hours after your last question, before you post a solution.
4. Post your question with a link to the original problem as a quote.
5. Read all the questions posted by other members so you don’t duplicate efforts.
6. If you have an example problem please PM me. I will post your problem and then you will be in charge of responding to questions.
I will begin with an example situation and a typical question.
«1

Comments

  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    You are the IT support for a small company with around 100 client PCs. There are two sites. One is the Corporate headquarters and the other is the warehouse facility/maufacturing plant. You are the lead in the IT department which consists of you and a part-time intern. It is 8:00 AM. You receive a call from a user in the office stating she cannot get online. What do you do.
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    You are the IT support for a small company with around 100 client PCs. There are two sites. One is the Corporate headquarters and the other is the warehouse facility/maufacturing plant. You are the lead in the IT department which consists of you and a part-time intern. It is 8:00 AM. You receive a call from a user in the office stating she cannot get online. What do you do.

    Can I ping www.google.com?
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    Can I ping www.google.com?
    Pings to google fail.
  • SteveO86SteveO86 Member Posts: 1,423
    Pings to google fail.

    Did the ping timeout or did it not resolve the name google.com?
    My Networking blog
    Latest blog post: Let's review EIGRP Named Mode
    Currently Studying: CCNP: Wireless - IUWMS
  • CT06CT06 Registered Users Posts: 1 ■□□□□□□□□□
    Are other users experiencing the same problem?
  • PsoasmanPsoasman Member Posts: 2,687 ■■■■■■■■■□
    Can I ping www.google.com?

    Can she ping the loopback?
  • willhi1979willhi1979 Member Posts: 191
    Results of IPConfig /all?
  • Jack2Jack2 Member Posts: 153
    willhi1979 wrote: »
    Results of IPConfig /all?

    agreed also check:

    Can you get to other network resources on the network? Check DHCP address is it on the right network segment?

    Check the default gateway and that you have working DNS internally and externally.. "nslookup google.com"

    The least common denominator question if you computer worked would be: Is her computer turned on? but are you really going to go there first.. I have seen it though lol :P
    WGU Courses Completed at WGU: CPW3, EWB2, WFV1, TEV1, TTV1, AKV1, TNV1| TSV1, LET1, ORC1, MGC1, TPV1, TWA1, CVV1, DHV1, DIV1, DJV1, TXP1, TYP1, CUV1, TXC1, TYC1, CJV1
    Classes Transferred: BAC1, BBC1, LAE1, LAT1, LUT1 ,1LC1, 1MC1, QLT1, IWC1, IWT1, INC1, INT1, SSC1, SST1, CLC1
    WGU Graduate - BSIT 2014
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    SteveO86 wrote: »
    Did the ping timeout or did it not resolve the name google.com?
    Unresolved. Very good question.
    CT06 wrote: »
    Are other users experiencing the same problem?
    You sent the ping from your PC. So presumably, yes. Another good question.
  • apena7apena7 Member Posts: 351
    Since other users are having the same problem, did I or the part-time intern make any recent changes overnight?
    Usus magister est optimus
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    willhi1979 wrote: »
    Results of IPConfig /all?

    On which PC?
    Yours looks like this. You are also in the main office.
     Physical Address. . . . . . . . . : 00-24-D2-34-6E-BA
     DHCP Enabled. . . . . . . . . . . : Yes
     Autoconfiguration Enabled . . . . : Yes
     IPv4 Address. . . . . . . . . . . : 192.168.1.101(Preferred)
     Subnet Mask . . . . . . . . . . . : 255.255.255.0
     Lease Obtained. . . . . . . . . . : Saturday, January 22, 2011 5:46:22 PM
     Lease Expires . . . . . . . . . . : Monday, January 24, 2011 8:53:38 PM
     Default Gateway . . . . . . . . . : 192.168.1.1
     DHCP Server . . . . . . . . . . . : 192.168.1.4
     DNS Servers . . . . . . . . . . . : 192.168.1.5
     NetBIOS over Tcpip. . . . . . . . : Enabled
    
    Jack2 wrote: »
    agreed also check:

    Can you get to other network resources on the network? Check DHCP address is it on the right network segment?

    Check the default gateway and that you have working DNS internally and externally.. "nslookup google.com"

    The least common denominator question if you computer worked would be: Is her computer turned on? but are you really going to go there first.. I have seen it though lol :P

    Ping to DFG returns (192.168.1.1)
    NSLOOKUP times out

    Do you guys have a set of external IPs that you ping in cases like this? I always use 8.8.8.8, which is one of Google's public DNS servers.

    So far so good. We are starting to get to the issue.
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    Psoasman wrote: »
    Can she ping the loopback?
    Yes. In the real situation I did not ask this question as I was also experiencing the issue.
  • SteveO86SteveO86 Member Posts: 1,423
    On which PC?
    Yours looks like this. You are also in the main office.
     Physical Address. . . . . . . . . : 00-24-D2-34-6E-BA
     DHCP Enabled. . . . . . . . . . . : Yes
     Autoconfiguration Enabled . . . . : Yes
     IPv4 Address. . . . . . . . . . . : 192.168.1.101(Preferred)
     Subnet Mask . . . . . . . . . . . : 255.255.255.0
     Lease Obtained. . . . . . . . . . : Saturday, January 22, 2011 5:46:22 PM
     Lease Expires . . . . . . . . . . : Monday, January 24, 2011 8:53:38 PM
     Default Gateway . . . . . . . . . : 192.168.1.1
     DHCP Server . . . . . . . . . . . : 192.168.1.4
     DNS Servers . . . . . . . . . . . : 192.168.1.5
     NetBIOS over Tcpip. . . . . . . . : Enabled
    



    Ping to DFG returns (192.168.1.1)
    NSLOOKUP times out

    Do you guys have a set of external IPs that you ping in cases like this? I always use 8.8.8.8, which is one of Google's public DNS servers.

    So far so good. We are starting to get to the issue.

    If we change the DNS server on our local PC to 8.8.8.8 are we able to successfully ping google.com now?

    (After seeing the name resolution error from the first ping command I would already be Pinging and/or RDPing into my DNS Server verifying the server is up and service is running)

    Can I successfully RDP into my DNS server?
    If no can I ping it successfully?
    If yes is the DNS Service running?

    (Maybe another rule should be added limiting the amount of questions a person can ask?)
    My Networking blog
    Latest blog post: Let's review EIGRP Named Mode
    Currently Studying: CCNP: Wireless - IUWMS
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    SteveO86 wrote: »
    If we change the DNS server on our local PC to 8.8.8.8 are we able to successfully ping google.com now?
    ...
    Can I successfully RDP into my DNS server?
    If no can I ping it successfully?
    If yes is the DNS Service running?

    (Maybe another rule should be added limiting the amount of questions a person can ask?)
    Yes.
    No.
    No.
    N/A

    Let's see how it goes.

    Anyone got a situation to share? PM me and we can start on that. This should be done soon.
  • Jack2Jack2 Member Posts: 153
    Yes.
    No.
    No.
    N/A

    Let's see how it goes.

    Anyone got a situation to share? PM me and we can start on that. This should be done soon.


    Can you get to Google by an IP address?

    If you can ..

    Internal DNS services are DOWN! Is there a secondary internal DNS server on the network? Why not. Or even an external?
    WGU Courses Completed at WGU: CPW3, EWB2, WFV1, TEV1, TTV1, AKV1, TNV1| TSV1, LET1, ORC1, MGC1, TPV1, TWA1, CVV1, DHV1, DIV1, DJV1, TXP1, TYP1, CUV1, TXC1, TYC1, CJV1
    Classes Transferred: BAC1, BBC1, LAE1, LAT1, LUT1 ,1LC1, 1MC1, QLT1, IWC1, IWT1, INC1, INT1, SSC1, SST1, CLC1
    WGU Graduate - BSIT 2014
  • SteveO86SteveO86 Member Posts: 1,423
    Just for the sake of learning I attached 2 screen shots..

    The first one is a ping to google.com with the pings timing out.. However it does resolve the name to an IP address.

    The second screen shot is a ping to google.com with a bad DNS server entry, notice the results are different, and it does not resolve the name to the IP address and also advises you to check the name your are trying to ping. At that point you could probably skip using NSLookup and jump right into DNS. (If a ping did not resolve the name then DNS Server can not find the name, or the server is unavailable).

    So ping can give you a bit more information then just normal connectivity tests.
    My Networking blog
    Latest blog post: Let's review EIGRP Named Mode
    Currently Studying: CCNP: Wireless - IUWMS
  • Bl8ckr0uterBl8ckr0uter Inactive Imported Users Posts: 5,031 ■■■■■■■■□□
    SteveO86 wrote: »
    Just for the sake of learning I attached 2 screen shots..

    The first one is a ping to google.com with the pings timing out.. However it does resolve the name to an IP address.

    The second screen shot is a ping to google.com with a bad DNS server entry, notice the results are different, and it does not resolve the name to the IP address and also advises you to check the name your are trying to ping. At that point you could probably skip using NSLookup and jump right into DNS. (If a ping did not resolve the name then DNS Server can not find the name, or the server is unavailable).

    So ping can give you a bit more information then just normal connectivity tests.

    The screenshot for a bad entry produces the same result as a host without an ip address. Interesting.


    Also today I found out that even if you have no ip address and all adapters are disabled, you can still ping 127.0.0.1. I just thought that was interesting.
  • michaelcoxmichaelcox Member Posts: 105
    I'd most likely have them reboot their computer first and then call me back if its still not working.

    Assuming its not:

    first, have them do an IPConfig /all

    from there, have them ping the default gateway.

    then, ping 8.8.8.8

    then, ping (the companies website)

    if all are fine and its still not working, check Proxy server settings in web browser.

    Courses Completed at WGU ( 8 ):
    Term 1 (April 2011): EWB2, WSV1, BRV1, BSV1 | Term 2 (October 2011): LET1, ORC1 | Term 3 (April 2012): MGC1, TPV1
    Courses Required Graduate WGU with BS - IT: SEC ( 8 ):
    BOV1, KET1, WDV1, KFT1, ABV1, TWA1, BLV1, CPW4
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    Jack2 wrote: »
    Can you get to Google by an IP address?

    If you can ..

    Internal DNS services are DOWN! Is there a secondary internal DNS server on the network? Why not. Or even an external?

    Partial answer - not accepted.

    What does internal DNS is down mean?

    If clients began to use an external DNS server, how would they resolve locally based names? Having the secondary DNS server set to an external DNS system is not a good practice. Some clients can actually begin to prefer the configured secondary server if it begins to respond to queries faster than the primary. And if the client receives a negative answer (domain does not exist -for example) it will not check with another DNS server just to be sure.
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    michaelcox wrote: »
    I'd most likely have them reboot their computer first and then call me back if its still not working.

    Assuming its not:

    first, have them do an IPConfig /all

    from there, have them ping the default gateway.

    then, ping 8.8.8.8

    then, ping (the companies website)

    if all are fine and its still not working, check Proxy server settings in web browser.
    Before you pass something off on your customer ensure that you understand what they are reporting. It takes two seconds for you to ping an external host. If you can get online, that's one thing. If your ping has issues then you can move on. Assuming the customer is the issue and not gather informatioon will never win you stars.
  • willhi1979willhi1979 Member Posts: 191
    On which PC?

    The User's PC who is experiencing the problem.
  • SteveO86SteveO86 Member Posts: 1,423
    Also today I found out that even if you have no ip address and all adapters are disabled, you can still ping 127.0.0.1. I just thought that was interesting.

    I've always heard the loopback address 127.0.0.1 will always respond as long as the TCP/IP suite/protocol is installed (and not corrupt) on a windows device. A small way a testing TCP/IP.


    To continue the discussion.. We have verified I can not RDP or even ping the primary DNS server the next step in my opinion is look physically at the box. (Unless I have proper network documentation and I know what switch/port the DNS is plugged into and verify the port it up.)

    So my next set of questions:

    Is the switchport the DNS Server is connected to up? (what state is the port in - Down/Err-Disabled/Up/AdminDown)
    Moving physically to the DNS Server is it powered on?
    If yes check the ethernet cable.
    Do we have a link light?
    Is it plugged in?
    If not power it on. Verifying it is plugged into the wall or a properly working battery backup/UPS.
    My Networking blog
    Latest blog post: Let's review EIGRP Named Mode
    Currently Studying: CCNP: Wireless - IUWMS
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    SteveO86 wrote: »
    I've always heard the loopback address 127.0.0.1 will always respond as long as the TCP/IP suite/protocol is installed (and not corrupt) on a windows device. A small way a testing TCP/IP.

    That is true. All it tells you is that TCP/IP is functioning. The ping does not even exit onto the wire.

    We have found the greater issue. DNS server is not responding to pings, not responding to NS queries.

    What's next?
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    SteveO86 wrote: »
    I've always heard the loopback address 127.0.0.1 will always respond as long as the TCP/IP suite/protocol is installed (and not corrupt) on a windows device. A small way a testing TCP/IP.


    To continue the discussion.. We have verified I can not RDP or even ping the primary DNS server the next step in my opinion is look physically at the box. (Unless I have proper network documentation and I know what switch/port the DNS is plugged into and verify the port it up.)

    So my next set of questions:

    Is the switchport the DNS Server is connected to up? (what state is the port in - Down/Err-Disabled/Up/AdminDown)
    Moving physically to the DNS Server is it powered on?
    If yes check the ethernet cable.
    Do we have a link light?
    Is it plugged in?
    If not power it on. Verifying it is plugged into the wall or a properly working battery backup/UPS.

    OK, new rule. One question at a time.

    I'm going to give a little more time before I answer these.
  • SteveO86SteveO86 Member Posts: 1,423
    No rush.. I was going to exclude myself after my last set of questions. icon_wink.gif
    My Networking blog
    Latest blog post: Let's review EIGRP Named Mode
    Currently Studying: CCNP: Wireless - IUWMS
  • Bl8ckr0uterBl8ckr0uter Inactive Imported Users Posts: 5,031 ■■■■■■■■□□
    SteveO86 wrote: »
    I've always heard the loopback address 127.0.0.1 will always respond as long as the TCP/IP suite/protocol is installed (and not corrupt) on a windows device. A small way a testing TCP/IP.


    As have I. I guess when I heard "TCP/IP stack" I also assumed it did some sort of "hardware ping" of the actual devices as well (ethernet port, driver, etc). So basically 127.0.0.1 doesn't care about the physical device as well, which means it could be totally missing from the machine and it could come back just fine.
  • RobertKaucherRobertKaucher Member Posts: 4,299 ■■■■■■■■■■
    I believe you need some sort of adapter - either physical or virtual.
  • Bl8ckr0uterBl8ckr0uter Inactive Imported Users Posts: 5,031 ■■■■■■■■□□
    I believe you need some sort of adapter - either physical or virtual.

    Sounds like something to test out tonight.
  • rsuttonrsutton Member Posts: 1,029 ■■■■■□□□□□
    We have found the greater issue. DNS server is not responding to pings, not responding to NS queries.

    Is the server powered on?
Sign In or Register to comment.