IT: Entry Level Helpdesk (Common Active Directory Issues, CMD Commands, PC Offline) New Techs Part 6

hey you guys like doing this kev sick here bringing you another video on information technology i hope you're having a good day happy sunday and today i want to do my labs so i did lab one laptop 3.4 now live five now going to lab six so obviously if you need to my channel do it videos the desktop so probably we'll talk about how to get into i.t so as always rate comment subscribe hit the notification bell that way you know when i go live because i do go live and sometimes you may see something you have nursing but for maybe a giveaway maybe something that you might it might help you so for this one is i'm doing lab six so lab five yesterday was i created an account um i put windows 10 i added a user um i added i added a user and basically i logged in as the user and then i show you guys some different commands you can run and stuff like that so today i actually want to show you why we do all that like what's the point of that why why why do we create a another account if that makes sense let me let me um share my screen with you for a second and show you what you should be doing with that account that you just created if that makes sense let me let me go to my vms um on desktop desktop two so you remember that we created that account patty remember created an account patty right there's a there's a purpose for that because you have to you have to remember and keep in mind that um you you have to learn these skills what's the what's the skills i'm talking about you have to learn how to unlock an account how to change your password uh how to reset an account you have to you actually have to know what what what an account what it means when it comes expiring you have to know what it means when it comes off to when a computer falls off the domain you have to know like all these weird error messages you have to know about these error messages and a bunch of other things as well but understand that you need to know how to change your password how to unlock an account how to add someone to a group how to how to remove someone from a group how to give how to add someone to a distribution group or security we need to know all those things because when you go to the job market when you go on a job interview you have to explain that and you have to know what that is because a security group is not the same as a distribution group you have to know what the differences are so obviously a distribution group it's a group that people are added to and and then if you send an email it goes to a bunch of people part of that distribution group if you add it to a security group it's more for security things like a shared drive permissioning um to give you access to a folder to give you access to vpn maybe to give you access to a certain website like citrix or or a certain um like application like dual so you have two-factor authentication security these are security groups because the security groups do that that's what the design is for that a lot of these companies use security groups and a lot of these companies use distribution groups so you need to know the differences you need to know why they're different and why they're used in a job environment and you have to explain that when you're going to job interview you explain that i ask you the difference between security or distribution group distribution group is a group of is a group created so everyone receives that email so like if you create a group called i.t technology at whatever whatever whatever the website um anyone that's part of that group will receive the email but also you have to keep in mind that if someone's added to that group and you don't allow you don't allow for emails to go through from outside like third party you'll get a bounce back so they have to actually allow it on the 365 or office suite or 365 enterprise you have to allow that your that the email goes through on on a third party like gmail or yahoo or whatever msn whatever so that's a talk about distribution group for email not not not distribution group on ad it's all about distribution group on email and security group is different as well so they don't know the differences if that makes sense and i need you to learn that because that's something that you're going to see in the job environment so let me share my screen with you and i'm going to show you common so today is just common issues you encounter for a user if that makes sense oh common issues and i'm going to show you a cool cmd command as well and then we'll wrap that up after that okay just give me a second so let me share my screen with you and the screen let's bring one so yeah right now i'm logging as i'm logging here as paddy so pat is gonna be welcome one i believe just log in real quick so let me let me get my i'm going to show you something cool i'm going to show you something that uh because i i want to show you i i want to keep showing you the same thing over and over again you know i want to show you something that you actually could could use um you actually could use for your for for work if that makes sense you know so so i'm gonna i'm gonna show you before we do anything i want to show you some cmd commands that you should know if you're working for you working with a user so i'm on patty's computer right now if she calls you obviously you want to open up cmd um you want to know if you could ping anything so i'm going to ping ping uh 10.1.2 that 10.1 you know you gotta know if you ping the ip addresses so mine is mine is let me close out of that again so my server because i know the ip of the cert of the server it's 10.1.10.2 and it should work so the domain is kevtech.com but just remember that any domain will be kevtech.com it could just it could be any any domain or any domain you you create could be kevtech.com but the ip you need to know the ip not that not the domain the ip is very important because sometimes a lot of these companies may have the same name or domain name and you're pinging that and you're going to get a different ip address versus the one that you have in your job environment but obviously you know you just you know the ip address so mine is ping.10.1 that 10.2 so if you if you want a continuous ping you do minus t um good to know uh because if you have a computer that you're working on and you restart the computer and if you do minus t it will do a continuous ping and then it'll say timeout and then it'll come back up again and then you know when it's back up again by by by doing minus t if that makes sense so i mean you do uh control c and then you you stop it so if you do control c on your keyboard it actually stops from pinging so why why why would i care about this command i'll show you right now i i'm not doing my i'm not gonna use my desktop computer today i'm not gonna use desktop one i'm gonna use my server this i'm gonna show you i'm gonna show you why that's important watch to show you so right now i'm on this one right so i'm gonna show you some stuff that you need to know if you're working it or if you're actually going for job interviews i don't want you going there i'm prepared if that makes sense so uh we're gonna do is why why do we care about the ping command i'll show you right now so see here on this on the server right you want to do a cmd you want to ping uh desktop two right desktop two it should work i probably typed it wrong which is fine so you ping desktop two may not let me ping it let me see something so i'm gonna do ip config just give me a second so you know the ip addresses see like i'm pinging this one right now it won't work look at that it's connected to it but it don't work and i'm pretty sure it's because of the firewall let me just let me try something give me a second it's asking me for an account which is totally fine so every time you you got to elevate your account it's totally fine that's blocked well in an environment this will be this would not be off but let me see if this does anything so i'm going to do now it should work there we go problem solved there we go yeah it's the firewall yeah so anyway so that wouldn't do ping minus t why why am i doing that so you should restart this this is for people that help describe t so typically we use minus t it's to get a continuous ping so that way you you know when the computers and the computers back up again so what you do is you do a shutdown you do a restart and then you restart the computer you should get like no reply over here on the left hand side on your server or on your computer because you're pinging that ip address so it should be uh request timeout request timeout request timeout that's what it should say it should say something like that if that makes sense so it's just restarting right now and it's back up again um it's not doing anything like it's stuck right now so that it's back up again but it's something that you need to know if that makes sense it's not going to work on my environment but basically you need to know what that is so the welcome one again capital w welcome one it should log me in um so i'm gonna close out of that and then i'm gonna i'm gonna do uh desktop two can i remote into it it's probably gonna let me do it it's probably blocked i have to allow it to which is fine that's totally fine just wanna show you that and then and then like i said active directory you need to know about account lockout account password so we're going to play around with that right now before i do that i want to show you some other commands you could do so you could do cmd um you want to do is you want to run as administrator right because some other things you can't do if you're running is them you run as administrator you run with your help desk because i do have a help that's account by the way so i'm going to do password one household one two three exclamation point and i want to know what the group policy is set on this computer um so i'm going to show you a different command you have never seen before in my on any of my videos so you got to do gp result gp gp result if i could type would be nicer i could type gpu result slash r slash little dash right there c little dots and the slash again results dot txt so what is that what does that do you're about to see right now it's a purpose for that so i'm going to minimize that i'm going to go to my local c drive i'm going to go to this pc local disk and now you have this thing called results so basically you created a file uh to figure out what the what the gpu or group policy of this computer is and then you open it up and it will tell you it will tell you does not have our set properties so it says help desk does not have anything so then when you do it you're going to run it again as a regular user the same the same command as a regular user gp result um slash r so that's because i write it as as help desk if that makes sense so is that it's a cool command by the way you should probably try it when you have a chance it creates a file on that location this is access denied for patty it's kind of cool though and then you click on it like there's no there's no data here um the next command you probably might might want to try is let me open up cmd again just as the regular user uh gp gp update slash help and it will tell you everything about gp update you do gp update gp updates gp update result slash help again and it tells you right there how to fix it you just do question mark you do gp update result slash r and it tells you everything about group policy right there and all that good stuff if that makes sense you have different ones by the way it's not just one there's different ones so you want to read carefully what it says here we have gp update gp update slash h uh h gp report gp report dot html which is kind of cool there's a there's a lot of stuff you could do on this computer yeah just create it creates files for you so that that's that's one of the reports um it's something that you may want to try on your computer when you have a chance it's just like little things you want to try i i was playing around with this and oh that's kind of cool i don't know you could do that and i'm just playing around with it i i like to learn different i like to try different things so anyway just wanted to show you that real quick now i'm actually going to show you things you need to know if you're actually helping a user and stuff like that so the most common call you're gonna get from someone is that their account is locked out so i'm gonna do sign out watch let's just watch what i'm gonna do i'm gonna i'm gonna break this computer so i'm gonna do is i'm gonna log in this pattern type in randomly type it in randomly [Music] yeah reference account is currently locked and then you get that call from patty hi i can't get into my account it says my computer is locked i don't know what that means can you please help me and then what you want to do is yeah definitely i could definitely help you sure i hey good morning yeah yeah i could definitely help you with that let me let me assist you with that i definitely and you just got to go in here and you know you go to your you go to your active directory you click the little button right over here active directory using computers you want to go and go under users folder unless they're somewhere else in this one in this case using hr remember i created an ou you double click on her you click on account and you hit unlock that's it simple as i hit okay and apply and okay listen hey uh hi patty can you get can you try to log in again yes kevin let me try and they log in they log in and it should work hopefully it doesn't work then we have a bunch of problems man she'll let her back in so that that that's the comment that's the common call that you will get from someone i can't get in i can't like my account is locked though and this is keep in mind that this is for everything so this is for outlook outlook issues this might be because of vpn there are accounts locked out from vpn this could be because they're locked out because of their mobile phone this could be they're locked up because of their computer this could be that they're locked out because they have two more than two devices so they might have a computer here and a lot and their other computer might have an old password on it so that's locking them out so you have to restart that computer and unlock their account so it could be a lot of reasons why they're getting locked out but you need that that's that is a skill you need to have if you're doing help desk this skill that i just show you right now and i don't know it's like easy for everyone but for some people it's not easy people are some people are not comfortable with with using active directory so if you're weak at this you need to work on this if you're a week out if you know how to do this it's totally fine but a few weeks you need to work so the main thing about this is going into your your domain controller searching for patty and you search by the entire directory you double click on the user you hit account and you hit unlock account so that's that's that's common issue number one and then the other issue is going to be you're about to see other issues i'm gonna i'm gonna create a bunch of issues that you've never seen in your life before so the next one is um right click on patty i'm gonna hit disable account and you're like okay so patty's no longer part of the company what the hell happened over here and then i'm gonna i'm gonna log in as patty again let's see whatever message we get i'm gonna do welcome one again let's see if it lets me in i'm gonna have to restart the computer for this to work it's still letting me in for some reason so let's let's do let's do a restart so she she uh she just got back from from um from pay time off or from from maternity leave so they disabled her account because she she was gone for a little bit of time and she's calling you and she she can't log in for some reason she's like oh i'm trying to log in and i can't log in for some reason because i'm getting this weird message says the account has been disabled please see your system administrator kevin i'm sorry to bother you can i can you help me again i'm like yeah sure i can help you with that and then same thing you go into domain controller you right click on it you hit find you do paddy um and then you search by entire directory just in case because sometimes it might be somewhere else you right click on them you hit enable account and then you tell her like you hit find now it refreshes them so when that when it comes down like that it's because the account is disabled okay so when they when they call it can you try logging in again like okay kevin i don't know my password can you reset my password for me yeah of course i can i got you you know so then you right click on domain controller again you search for patty this is stuff you need to know if you're doing help that's garage support just this is why i'm going over this otherwise i would not go over this and then you right click on them right click on the user reset password and i'm going to give her the same password welcome one welcome one password has been changed can you try logging in again with welcome one sure kevin i'll log in right now give me a second all right let's see if this works sure that show that you in patty otherwise let me know i'd be more than happy to help okay is there anything else i can help you with that's how you talk when you're talking to someone so obviously you sign out again and then if you don't if you don't want to do that and you you can just do um these other ones it says reset reset user's password and then user must change password next login that means that they have to create their own password so in these other in these job environments you want to you want to tell them that you know oh yeah you have to you as soon as you log in it's going to make you change your password so i'm going to welcome one again and we're gonna hit okay i'm gonna check mark that i'm gonna see what happens so i'm gonna do welcome one again and it should properly change your password to see if it does that it might have to shut down the computer again i might not have to shut it down it may just log her in again so yeah so it's it's not taking an effect right away which is totally fine so it's okay um just restart it again so these are things you need to know if you're doing help desk right so i know that sounds like easy but it's kind of hard actually for some people you'll be surprised so this is today's just common issues you encounter on on uh on a user level so this is welcome one producer must change password for second you hit cancel it's gonna kick them out again so you wanna do welcome one hit okay tell them to make a new password um here in this scenario what i'm gonna do is i'm gonna uncheck that so you can check it so so i'm gonna go right click on this go to find do paddy do entire directory find now she's like i don't want to change my password i i want to keep that password you gave me you want to account user must change the next login you just hit apply you hit okay and that's it and then you you have them log in sharing prompt for password change you're gonna prompt for any of those things okay that's it it should be she should be good to go after that now i'm going to show you another issue because i want to show you all the issues that you probably get in a real job environment uh in a java interview too so then someone asks you oh how do you change your password on on how do you change your password for a user on active directory you know what active directory is you know what it means do you know how to change your password you know how to add a user to to a group do you know what what changing password next login means do you know what what what what disable an account means you know what that you know so they tell you all these things in the job interview so you need to get comfortable with this this is why we're making this lab so um i'm gonna go back to patty again now i'm really gonna mess this up i'm gonna go into account we're gonna go into end of we're gonna put two thousand two two thousand hit apply hit okay and then we're gonna go back here i'm gonna see if she could log in see what happens i'm really gonna i'm really gonna mess it up so i'm going to do is i'm going to do sign out see if i see i could just sign out inside back in account has expired the user account has expired so now they call you because of this and when usually when you get that message it's because they their their password needs to be changed or the password is expired and you have to you have to you have to extend their account on active directory which is what i just did i just i just i just went back in time instead of going forward so you have to go into your active directory users and computers again um you go find now you do fine you search for padding um entire directory obviously you double click on padding you hit account you go to never you hit apply you hit okay and then you want to you want to make sure that her account is valid like it's still good you know you don't want to you don't just start to log in because you don't know her account expire recently so you want to do you want to do net users space paddy domain and then they'll tell you right there password less last set 11 15. password expires in three months 213 passwords changeable 1116 last login 11 15 2 40. patty can you log in again can you log in with welcome one i think that was your password last time when we set it up when you first tried to log in for the first time try welcome one they should let you in okay kevin i'm gonna log in right now let's see for this it show that alright there we go simple as that the next the next message i'm gonna the next the next because you wanna you wanna you wanna play around with this you wanna break it because this is interview questions you'll probably ask i'm gonna do i'm gonna right click on desktop too i'm gonna hit disable account i'm gonna hit yes i'm gonna hit okay and then i'm gonna have her login again let's see what happens see here let's ring i might let her in let's try it again there's desktop two i believe that's why i call it desktop too i'm going to restart for a second so all right this is this is why you make these labs to practice so i'm gonna restart and show you what she can't she won't be able to log in because you just disable desktop too so it's just you know you gotta play around with this it's fun actually i like this i don't know why you guys i like doing these things it's fun because you get to see the issues that you like this is issues you encounter in real life the user can log in um and they get they get the trust relationship issue so her account is probably gonna work because it's uploaded it's already locally saved on the computer if that makes sense so that's the reason why she could log in so for this one what i'm going to do is i'm actually going to see if i can log in with help desk instead and let's see if it works there we go the server does not have a computer account in this workstation the trust relationship so you you encounter this issue when the computer has fallen from the domain and when that happens you're pretty much you're in trouble you can't log in or do anything so how do you fix that you have to actually if you enable the account here it might fix it it may not fix it so let's try enabling the account and see what happens i'll let you log in let's try it again it might let you in so you that's those are issues you need to know these are issues that you will encounter in real life now i'm going to show you another issue i'm actually gonna i'm actually gonna destroy or delete this computer right over here and um it might mess up the whole computer actually so i'm gonna do delete yes i just completely removed it from the domain wow it's actually trying to log in and it should let you in anyway but i i pretty much messed it up now you can't even log into that computer anymore you're about to see right now so i'm gonna do right right click on it i'm gonna to restart and no one should be able to log into this computer at all no one like that that's in the domain controller not a workgroup domain controller should not be able to log in anymore because of that because i just deleted the whole thing so now it's good now it's completely messed up at this point so let's see so we go back to patty i'm gonna do welcome one am i gonna run i might let her in because it's probably locally saved on the computer so i'm gonna do sign out again my letterman too because it's locally saved on the computer i'm going to log in with another account i'm not logging on a brand new account so i'm gonna go here i'm gonna do a new user i'm gonna call it test test next uh do welcome one again call it test and do other user will do tests i'm gonna do welcome one there we go shouldn't let me in at all anymore but this case this when this happens you actually have to remove the computer from the domain and read it back but let me see if i could get away with creating a desktop two here so i'm gonna right click here i'm gonna do computer for this one i'm going to do desktop 2 desktop 2 and i'm going to hit ok and i'm going to put it back over here so it's called desktop 2 now and let's see if it lets me in so i'm gonna do is i'm gonna go here i'm gonna hit restart i'm gonna go in cmd i'm gonna do ping desktop too so now it's not even there anymore you see it doesn't even find in a domain i just created it by the way i created a desktop too which you won't like this is not how you would do it by the way i'm just i'm experimenting right now so tess do welcome one i'm gonna do help desk i'm gonna do password one two three should let me in it sees desktop too now for some reason i'm gonna do sign out so i just created it again you could actually do that by the way in my job i've done this before so you could actually create the the desktop again on the ou you wouldn't do that by the way um in a real job environment you may not do that so this one is still not letting me in so at this point is messed up so you have to log in with the with the local account uh mine would be dot slash so if you want to log in local that you do dot slash um if you want to figure out how to log in locally you hit the little sign in button right over here it tells you log into desktop 2 by typing desktop two slash local user i'm gonna do dot slash administrator all right i'm gonna do enter she'll let me in we'll see if it lets me in i'm gonna delete the account right over here i'm gonna go over here on this computer i'm gonna go to this pc or right click on this pc i'm gonna hit properties i'm gonna hit change settings i'm gonna hit change i'm gonna put it back on a work group i hit okay you need to know the password for your help desk account otherwise it's not going to work minus help desk one two three exclamation point it's good practice by the way so this is this this is what you would be doing and this is what you'll be doing in a work environment where a computer falls off the domain and the user can't log in anymore you have to actually take it out re-add it again log in as log in as a local user take it out re-add it again and then log in as a as an admin account and you're you get to go after so this is something that you will see in your in the job environment this one that you would see in the job interview too like they will tell you that a computer has fallen from the domain what would you do if a computer has fallen from the domain what would you do would you would you just leave it alone would you restore it what would you do exactly and then like oh no i will log in as a local account if there's a local account on the computer log into local account i will log in as a local account i do change settings i go to see explorer change settings i go to change i take it off the domain and log in put the password in and then you know log in again as the admin and add it again on the domain so that that's that's basically what your answer would be if that makes sense so that this is how you would do it and now i'm going to log in again uh help desk password one two three okay it should let me back in the end let's see if it lets me back in here okay hit okay hit that hit restart now i'm gonna right click on computers when hit refresh it should be right here desktop two is back on the domain and that's it you're good to go after that so several common issues you're going to see in real life so i have to go over this and that that's pretty much it that's pretty much it for today um i hope this video helps you out as always i hope you guys have a great day as always rate comment subscribe give me thumbs up really appreciate it and um hopefully this video helps you out on slip shape reform we should be good to go with this and with that being said i hope you guys have a great day and next week we're going to go over ntfs share drive permissioning security groups and distribution groups okay i hope you guys have a great sunday and i hope you guys take care bye peace later

Channel: Kevtech IT Support

Views: 6,916

Keywords: IT, information, technology, kevtechnerd, kevtech, hedge, funds, engineer, desktop, support, service desk, helpdesk, entry level, helpdesk support, helpdesk it support, technical support, tech support, information technology, labs at home, virtual labs, account locked out, active directory, active directory password reset, password reset, account creation, gpresults, group policy, cmd commands, tech commands

Id: EA0ZnH4Rhm0

Length: 31min 17sec (1877 seconds)

Published: Sun Nov 15 2020