Windows Server Troubleshooting

Troubleshooting guides for Windows Server configuration in Nodinite environments.

Service Accounts and Permissions

• gMSA accounts — Configure Group Managed Service Accounts (gMSA) for Nodinite services; eliminates manual password rotation
  • Install Certificates for gMSA — Install certificates required when running services under gMSA accounts
• Logon as a Service right — Grant the Windows "Log on as a service" right to Nodinite service accounts
• Trusted for delegation — Configure Kerberos constrained delegation for multi-hop authentication (web → app → SQL)
• Cannot read configuration file due to insufficient permissions — Resolve IIS access-denied errors reading web.config or appsettings.json

Kerberos and Authentication

• PACVerification — Disable PAC Validation to reduce DC round-trips when Kerberos ticket validation causes delays

Windows Services and Components

• Transactions MSDTC — Enable and configure Distributed Transaction Coordinator for cross-database transactions
• MSMQ Queue Access denied — Fix access-denied errors when Nodinite services read or write MSMQ queues

Configuration and Compatibility

• Configuration Error - targetFramework — Resolve ASP.NET targetFramework configuration errors after .NET upgrades
• Windows FIPS Mode Compatibility — Understand compatibility implications when Windows FIPS 140 mode is enforced on the server
• Why do Nodinite use port 8000 — Explanation of the default port 8000 and how to change it

---