Master Windows Troubleshooting Like a Senior System Administrator
Introduction
A professional IT administrator does not rely only on graphical interfaces to manage Windows environments. While tools like Server Manager, Active Directory Users and Computers, Microsoft Intune, and Control Panel are useful, experienced system administrators know that the command line is often the fastest way to diagnose problems, collect information, and manage systems.
Whether you are troubleshooting a network connection, investigating Active Directory issues, repairing Windows corruption, managing services, or checking system performance, Windows commands provide powerful insights that are not always available through graphical tools.
In enterprise environments, where administrators manage hundreds or thousands of computers, command-line skills are essential.
In this article, we will explore 50 Windows commands every IT administrator should know in 2026, covering:
- System information
- Networking troubleshooting
- Active Directory administration
- Windows repair
- User management
- Remote administration
- Storage management
- Security
- Performance monitoring
Section 1: Basic System Information Commands
Before troubleshooting any Windows computer, administrators need to understand the system they are working with.
- SYSTEMINFO — Complete System Information
Command:
systeminfo
The systeminfo command provides detailed information about a Windows computer.
It displays:
- Computer name
- Windows version
- Operating system build
- Installed updates
- Memory information
- Domain membership
- System boot time
Example Use Case:
A user reports a software compatibility issue. Instead of manually checking system properties, an administrator can quickly collect the complete machine information.
- HOSTNAME — Display Computer Name
Command:
hostname
Displays the current computer name.
Why It Is Useful:
In enterprise environments, administrators often manage hundreds of devices. Knowing the exact hostname is important when troubleshooting remote systems.
- WHOAMI — Current User Information
Command:
whoami
Shows the currently logged-in user.
Advanced command:
whoami /groups
Displays:
- User account
- Security groups
- Permission levels
Example:
Useful when troubleshooting:
- Access denied errors
- Group membership issues
- Administrative permissions
- VER — Windows Version
Command:
ver
Quickly displays the Windows version.
Useful for:
- Checking operating system versions
- Troubleshooting compatibility issues
- WINVER — Windows Build Information
Command:
winver
Displays detailed Windows version information.
Useful for:
- Windows 10/11 troubleshooting
- Feature update verification
- Patch validation
Section 2: Network Troubleshooting Commands
Networking problems are among the most common issues handled by IT administrators.
Understanding basic network commands is essential.
- IPCONFIG — Network Configuration
Command:
ipconfig
Detailed information:
ipconfig /all
Shows:
- IP address
- Default gateway
- DNS servers
- DHCP information
- Network adapters
Common Use:
Troubleshooting:
- No internet connection
- Domain connectivity issues
- DNS problems
- IPCONFIG /FLUSHDNS — Clear DNS Cache
Command:
ipconfig /flushdns
Clears stored DNS records.
Useful when resolving:
- Website access issues
- Incorrect DNS records
- Name resolution problems
- IPCONFIG /RENEW — Request New IP Address
Command:
ipconfig /renew
Requests a new DHCP address from the network.
Useful when:
- A device receives an incorrect IP address
- Network connectivity fails
- PING — Test Network Connectivity
Command:
ping google.com
Used to test:
- Connectivity
- Latency
- Packet loss
Example:
ping server01.company.local
Useful for checking if a server is reachable.
- TRACERT — Trace Network Route
Command:
tracert google.com
Shows the path network traffic takes.
Useful for identifying:
- Routing problems
- Network delays
- Connection failures
- NSLOOKUP — DNS Troubleshooting
Command:
nslookup microsoft.com
Checks:
- DNS records
- DNS server responses
Useful for:
- Domain troubleshooting
- Server discovery problems
- NETSTAT — Network Connections
Command:
netstat -ano
Displays:
- Active connections
- Listening ports
- Process IDs
Useful for:
- Security investigations
- Finding applications using ports
- PATHPING — Advanced Network Testing
Command:
pathping servername
Combines:
- Ping
- Traceroute
Useful for diagnosing packet loss.
- TEST-NETCONNECTION (PowerShell)
Command:
Test-NetConnection server01 -Port 443
Used to test:
- Firewall rules
- Port availability
- Server connectivity
Example:
Testing HTTPS:
Test-NetConnection website.com -Port 443
Section 3: Active Directory Administration Commands
Active Directory administrators use these commands regularly for domain troubleshooting.
- GPUPDATE — Refresh Group Policy
Command:
gpupdate /force
Forces:
- User policies
- Computer policies
Useful when:
- New policies are not applying
- Security settings need refreshing
- GPRESULT — View Applied Group Policies
Command:
gpresult /r
Generate HTML report:
gpresult /h report.html
Useful for troubleshooting:
- Missing policies
- Incorrect GPO assignments
- NLTEST — Domain Controller Testing
Command:
nltest /dsgetdc:domain.com
Checks:
- Domain controller discovery
- Domain connectivity
- WHOAMI /GROUPS — Check User Membership
Command:
whoami /groups
Displays:
- Security groups
- User permissions
- REPADMIN — Active Directory Replication
Command:
repadmin /replsummary
Used by senior administrators to troubleshoot:
- Domain replication problems
- Domain controller communication
- DCDIAG — Domain Controller Health Check
Command:
dcdiag
Checks:
- DNS
- Replication
- Services
- Connectivity
Essential for Domain Controller troubleshooting.
Section 4: Windows Troubleshooting Commands
- SFC — System File Checker
Command:
sfc /scannow
Repairs corrupted Windows system files.
Useful for:
- Windows crashes
- Missing files
- System instability
- DISM — Windows Image Repair
Command:
DISM /Online /Cleanup-Image /RestoreHealth
Used when:
- Windows Update fails
- SFC cannot repair files
- CHKDSK — Disk Checking
Command:
chkdsk C:
Checks:
- File system errors
- Disk problems
- TASKLIST — View Running Processes
Command:
tasklist
Similar to Task Manager.
Useful for:
- Finding running applications
- Troubleshooting high resource usage
- TASKKILL — Stop Processes
Command:
taskkill /PID 1234 /F
Useful for:
- Frozen applications
- Unresponsive processes
- SC — Service Management
View services:
sc query
Start service:
sc start Spooler
Useful for managing Windows services.
- NET START / NET STOP
Start service:
net start spooler
Stop service:
net stop spooler
Commonly used for:
- Print problems
- Application services
- EVENTCREATE — Create Test Event Logs
Command:
eventcreate /ID 100 /L APPLICATION /T INFORMATION /SO Test /D “Test Event”
Useful for:
- Testing monitoring systems
- Validating alerting solutions
Section 5: User and Account Management
- NET USER
View users:
net user
Create user:
net user Kelvin Password123 /add
Useful for:
- Local account management
- Troubleshooting permissions
- NET LOCALGROUP
Add user to administrators:
net localgroup administrators Kelvin /add
- QUERY USER
Check logged-in users:
query user
Useful on:
- Remote Desktop servers
- Terminal servers
- LOGOFF
Disconnect sessions:
logoff sessionID
Useful for:
- Removing stuck sessions
- Server administration
Section 6: Remote Administration Commands
- MSTSC — Remote Desktop
mstsc
Launches Remote Desktop Client.
- WINRS — Remote Command Execution
winrs -r:server01 hostname
Allows remote command execution.
- PowerShell Remote Session
Enter-PSSession Server01
Used by enterprise administrators for remote management.
Section 7: Disk and Storage Commands
- DISKPART
diskpart
Manage:
- Disks
- Partitions
- Volumes
- FSUTIL
Example:
fsutil volume diskfree c:
Displays disk space information.
- TREE
Display folder structure:
tree C:\ /f
Useful for understanding file structures.
- DIR
List files:
dir
Advanced:
dir /s
- ROBOCOPY
Copy files:
robocopy C:\Data D:\Backup /MIR
Used for:
- Backups
- File migrations
- File server projects
Section 8: Security Commands
- GPEDIT
Open Local Group Policy Editor:
gpedit.msc
- SECPOL
Open Local Security Policy:
secpol.msc
- CERTMGR
Manage certificates:
certmgr.msc
- WHOAMI /PRIV
View user privileges:
whoami /priv
- CIPHER
Check encryption status:
cipher /status
Useful for:
- NTFS encryption
- Security checks
Section 9: Windows Administrative Tools
- EVENTVWR — Event Viewer
eventvwr.msc
Used for:
- Application logs
- System logs
- Security logs
- SERVICES
services.msc
Manage:
- Windows services
- Startup types
- COMPUTER MANAGEMENT
compmgmt.msc
Includes:
- Disk Management
- Event Viewer
- Local Users
- DEVICE MANAGER
devmgmt.msc
Used for:
- Driver troubleshooting
- Hardware issues
- PERFORMANCE MONITOR
perfmon.msc
Analyze:
- CPU usage
- Memory
- Disk performance
- Network activity
Bonus: Commands Used by Modern Cloud Administrators
Modern IT administrators also work with cloud platforms.
Active Directory PowerShell
Get-ADUser
Used for managing Active Directory users.
Azure PowerShell
Get-AzVM
Used for managing Azure resources.
Microsoft Graph PowerShell
Get-MgUser
Used for:
- Microsoft 365
- Entra ID
- Intune administration
Final Thoughts
Command-line knowledge separates a beginner administrator from an experienced IT professional.
A senior system administrator does not simply click through menus. They understand how Windows works internally and use the right tools to quickly identify and resolve problems.
Mastering these 50 Windows commands will improve your ability to:
- Troubleshoot faster
- Automate repetitive tasks
- Manage enterprise environments
- Support Windows Server and Microsoft 365
- Become a more effective System Administrator
The best administrators combine GUI tools with command-line skills.
Learn the command. Understand the technology. Solve the problem.
About the Author
Kelvin Johnson is an IT System Administrator with experience managing enterprise environments using Microsoft technologies including Windows Server, Active Directory, Microsoft 365, Azure, Microsoft Intune, SCCM, and endpoint management solutions. He shares practical IT knowledge to help administrators improve their technical skills and advance their careers.