IT SUPPORT MASTER COMMAND REFERENCE
1. System Information (Baseline Assessment)Purpose:
To collect hardware, OS, and system configuration data before troubleshooting.
Key Commands
systeminfo
Retrieves comprehensive system data including OS version, build number, uptime, installed patches, RAM, and system model.
wmic cpu get name
Extracts processor details using Windows Management Instrumentation (WMI).
hostname
Displays the system’s network identity, critical in domain-based environments.
dxdiag
Diagnoses DirectX, GPU, sound, and driver issues.
2. Network Commands (Connectivity Diagnostics)
Purpose:
To verify network configuration, reachability, and communication paths.
Key Commands
ipconfig /all
Displays full TCP/IP configuration including IP address, subnet mask, DNS, DHCP, and MAC address.
ping hostname
Tests basic network connectivity and packet loss.
tracert address
Identifies routing paths and network latency issues.
netstat -an
Displays active network connections and listening ports.
3. Process & Services Management (Operational Control)
Purpose:
To monitor, control, and recover running processes and background services.
Key Commands
tasklist
Lists active processes with memory and CPU usage.
taskkill /im process.exe
Terminates unresponsive or malicious processes.
services.msc
GUI-based service control panel for startup types and dependencies.
sc query
Command-line service status checker (preferred in remote administration).
4. File & Disk Operations (Data Integrity & Storage Management)
Purpose:
To manage file systems, storage health, and data recovery.
Key Commands
dir
Lists directory contents.
copy source destination
Transfers files between locations.
del /f filename
Force deletes protected or locked files.
chkdsk /f
Detects and repairs logical disk errors.
5. User Management (Access & Security Control)
Purpose:
To control user accounts, privileges, and local security policies.
Key Commands
net user
Displays all local user accounts.
net localgroup administrators
Lists users with administrative privileges.
net user username /delete
Removes inactive or unauthorized accounts.
wmic useraccount
Retrieves advanced user account attributes.
6. Troubleshooting & Recovery (Root Cause Resolution)
Purpose:
To identify, analyze, and repair system-level faults.
Key Commands
sfc /scannow
Scans and restores corrupted Windows system files.
chkdsk /r
Locates bad sectors and recovers readable data.
eventvwr
Analyzes system, security, and application logs.
msconfig
Controls startup behavior and boot diagnostics.
,%20Endpoint%20Detection%20and%20Response%20(EDR),%20and%20Extended%20Detection%20and%20Response%20(XDR).gif)