Public technical evidencePractisingWindows Endpoint Support & Networking
Windows 11 Endpoint Health & Network Verification
Verify the health and network connectivity of a Windows 11 workstation after Windows updates using built-in Windows and PowerShell diagnostic tools. Practice a structured IT support troubleshooting process by validating the endpoint, operating system, network configuration, DHCP, gateway connectivity, DNS resolution and HTTPS connectivity.
Technical summary
Scenario
Verify the baseline health and network readiness of a Windows 11 Pro endpoint running in UTM, including system identity, IP/DNS configuration, internet reachability, HTTPS connectivity and device health.
Key checks
Confirm endpoint identity, Windows edition/build and update status
Verify IPv4 address, DHCP, default gateway and DNS configuration
Test gateway and external IP reachability, DNS resolution and TCP/443 connectivity
Review Plug and Play device health and investigate reported driver installation errors
Key finding
Plug and Play checks identified multiple virtual-device installation errors, including a representative Code 28 finding. Investigation showed the available QEMU firmware configuration driver did not include ARM64 support.
Decision
Do not force-install the incompatible QEMU firmware configuration driver. Record the device finding, keep it under observation, and continue validating the endpoint because core Windows, network, DNS, HTTPS and guest-service functions remained operational.
Verified outcome
Windows 11 Pro 24H2 was confirmed, and Windows Update reported the endpoint was up to date. The endpoint received valid DHCP configuration, gateway and external connectivity tests passed with 0% packet loss, DNS resolution succeeded, TCP/443 connectivity to microsoft.com succeeded, and the installed QEMU/Spice guest services were running.
Stage
Practising
Procedure
28 documented steps
Skills
24 evidenced
Technical items
34 recorded
Jump to section
Scenario
A Windows 11 workstation has completed Windows updates and requires post-update verification before being considered ready for normal use.
The workstation is checked using a structured Service Desk troubleshooting approach rather than assuming it is healthy simply because Windows starts or a website opens.
The verification includes confirming the logged-in user and computer identity, Windows version and build, update status, network configuration, DHCP operation, local gateway connectivity, external network reachability, DNS resolution and HTTPS service connectivity.
Environment
Endpoint
WIN11-CLIENT01
Platform
UTM virtual machine
Operating System
Windows 11 Pro 24H2
OS Build
26100.9168
Logged-in User
WIN11-CLIENT01\krishna.user
Network Adapter
Red Hat VirtIO Ethernet Adapter
Connection
Ethernet
IPv4 Address
192.168.64.4
Subnet Mask
255.255.255.0
Default Gateway
192.168.64.1
DHCP Server
192.168.64.1
IPv4 DNS Server
192.168.64.1
Visual evidence
Windows 11 Endpoint Network Path
I verified the Windows 11 endpoint's local network configuration, gateway reachability, DHCP and DNS services, external IP connectivity, and HTTPS access during the endpoint health check.
>
>
>
>
>
Connections
WIN11-CLIENT01 → UTM virtual gateway · Local networkUTM virtual gateway → External IP reachability · ICMP reachabilityUTM virtual gateway → microsoft.com HTTPS · DNS + TCP/443
Procedure
01
Verified the logged-in user context using:
whoami
Result
WIN11-CLIENT01\krishna.user
02
Verified the workstation hostname using:
hostname
Result
WIN11-CLIENT01
03
Troubleshooting
During operating-system identification, Get-ComputerInfo and Windows CurrentVersion information returned the compatibility-oriented product name "Windows 10 Pro".
Because this appeared inconsistent with the installed system, the operating-system information was cross-checked using DisplayVersion, build information and winver.
winver confirmed
Windows 11 Pro
Version 24H2
OS Build 26100.9168
This demonstrated the importance of validating unexpected diagnostic information using multiple sources rather than trusting a single field.
During the Plug-and-Play device health check, Get-PnpDevice reported 33 currently present devices with Error status.
The initial output contained blank Class and FriendlyName fields. Rather than assuming that 33 hardware components were faulty, the InstanceId values were retrieved for further investigation.
The devices grouped into
32 × ACPI\LNRO0005
1 × ACPI\QEMU0002
A representative ACPI\LNRO0005 entry returned Windows Problem Code 28 (CM_PROB_FAILED_INSTALL).
The ACPI\QEMU0002 entry also returned Problem Code 28.
Validation
4 verified healthy4 findings investigated12 recorded
System & identity
Verified healthy
Windows Update
Healthy
Windows Update status
You're up to date.
Endpoint Identity
Recorded
Hostname
Recorded
Lessons learned
I learned that endpoint health should be verified systematically rather than assuming that a workstation is healthy because Windows starts successfully.
For network troubleshooting, I practised checking the client configuration first and then testing connectivity in stages.
The IPv4 address, subnet mask and default gateway establish whether the endpoint has a usable local configuration.
Testing the default gateway verifies local network reachability.
Testing a public IP address such as 1.1.1.1 verifies external IP connectivity without relying on DNS.
DNS should be tested separately because internet routing can work while name resolution is failing.
I also learned that a successful ping does not prove that an application service is reachable. Test-NetConnection can validate connectivity to a specific TCP service such as HTTPS on port 443.
I learned how DHCP automatically supplies network configuration such as the IP address, subnet mask, gateway and DNS information. DHCP assignments are leased for a period and normally renewed automatically by Windows.
This reinforced that repair commands such as ipconfig /release and ipconfig /renew should not be used unnecessarily when DHCP is already working.
I also learned that diagnostic information can sometimes appear inconsistent. Get-ComputerInfo and registry information displayed "Windows 10 Pro", while winver and the build information confirmed Windows 11 Pro 24H2.
Skills demonstrated
Windows endpoint health verificationPost-update workstation verificationWindows version and build verificationPowerShell-based endpoint diagnosticsIPv4 configuration analysisDHCP configuration verificationDefault gateway connectivity testingExternal network reachability testingDNS resolution testingTCP port connectivity testingLayered network troubleshootingWindows Plug-and-Play device investigationWindows device problem-code analysisDriver compatibility verificationWindows architecture verificationDriver INF inspectionVirtual machine guest-tools verificationWindows service-status verificationTroubleshooting before remediationTechnical risk assessmentTechnical evidence collectionDiagnostic result interpretationStructured Service Desk troubleshootingEvidence-based technical documentation
Tools & technical items
Windows 11Windows PowerShellWindows UpdateUTMQEMUSPICEVirtIO NetworkingWindows Plug and PlayWindows PnP UtilityTCP/IPIPv4IPv6DHCPDNSICMPTCPHTTPSipconfig
Assessed service impact before deciding whether further remediation was justified.
At the current stage, Windows boot, DHCP, network connectivity, DNS resolution, HTTPS connectivity and the tested UTM/QEMU/SPICE guest services remain operational.
The virtual-device Code 28 findings have therefore been documented for further assessment rather than forcing an incompatible driver installation.
Before attempting to install a driver for ACPI\QEMU0002, the Windows architecture was verified as ARM64.
The mounted UTM Guest Tools media contained a qemufwcfg.inf candidate driver. The INF file was inspected directly and was found to declare support for NTx86 and NTAMD64, but no NTARM64 section.
Because the workstation is running ARM64 Windows, the candidate driver was not manually installed.
Existing guest integration was then checked. UTM Guest Tools 0.1.271, QEMU Guest Agent and ARM64 Spice webdavd were installed, while QEMU Guest Agent, SPICE webdav proxy and SPICE VDAgent services were all running.
No current impact has been observed to Windows startup, DHCP, IP connectivity, DNS resolution, HTTPS connectivity or the tested guest-integration services.
The Code 28 virtual-device findings are therefore being documented and assessed rather than forcing an incompatible remediation solely to remove a warning.
A separate UTM startup issue occurred before the Windows health-check session after the UTM application had previously been closed. The virtual machine initially reported that another process could be using its EFI variables file.
The VM was subsequently recovered and started normally. This incident is better suited to a separate Support Case because it represents a specific fault and recovery scenario rather than the planned endpoint-health verification itself.
Operating System
Recorded
Windows 11 Pro
Version
24H2
OS Build
26100.9168
Architecture
ARM64
Additional verification
Finding investigated
Win11-Client01
Recorded
Logged-in user
WIN11-CLIENT01\krishna.user
Arm64
Recorded
Candidate Driver
qemufwcfg.inf
Candidate INF declared
NTx86
Ntamd64
Finding
NTARM64 declared
No
Decision
Candidate driver was not manually installed because architecture compatibility was not confirmed.
Network configuration
Verified healthy
Network Adapter
Recorded
Red Hat VirtIO Ethernet Adapter
Ip Configuration
Recorded
IPv4 Address
192.168.64.4
Subnet Mask
255.255.255.0
Default Gateway
192.168.64.1
Dhcp
Recorded
DHCP Enabled
Yes
DHCP Server
192.168.64.1
DHCP lease observed
Recorded
21 August 2026 9
05:44 PM to 10:05:44 PM
Dns
Healthy
IPv4 DNS Server
192.168.64.1
DNS query
microsoft.com
DNS resolution
Successful
IPv4 response
150.171.109.24
IPv6 response
Recorded
2603
1061:14:18::1
Connectivity
Verified healthy
Default Gateway Connectivity
Recorded
Target
192.168.64.1
Packets Sent
4
Packets Received
4
Packet Loss
0%
External Ip Connectivity
Recorded
Target
1.1.1.1
Packets Sent
4
Packets Received
4
Packet Loss
0%
Average Latency
15 ms
Https Tcp Connectivity
Healthy
Target
microsoft.com
Remote Address
150.171.109.24
Remote Port
443
Source Address
192.168.64.4
TcpTestSucceeded
True
Device & driver health
Finding investigated
Device Health Investigation
Recorded
Initial present PnP devices reporting Error
33
Grouped result
Recorded
ACPI\LNRO0005
32
ACPI\QEMU0002
1
Representative Acpi\Lnro0005 Device
Finding
Status
Problem
Problem Code
28
Problem
Recorded
Acpi\Qemu0002 Device
Finding
Status
Problem
Problem Code
28
Problem
Recorded
Driver Compatibility Verification
Recorded
Windows Architecture
Recorded
Guest integration
Verified healthy
Utm / Guest Integration
Recorded
UTM Guest Tools
0.1.271 installed
QEMU Guest Agent
109.1.0 installed
Spice webdavd
2.5.0 ARM64 installed
Service Status
Healthy
QEMU Guest Agent
Running
SPICE webdav proxy
Running
SPICE VDAgent
Running
Outcome
Finding investigated
Current Assessment
Finding
The endpoint successfully completed the operating-system, update and network checks performed so far.
DHCP assignment, local gateway connectivity, external IP reachability, DNS resolution and outbound HTTPS TCP connectivity were successfully validated.
Thirty-three virtual ACPI device entries currently report Windows Problem Code 28. Investigation identified the device families, confirmed the Windows ARM64 architecture and prevented installation of a candidate driver that did not declare ARM64 support.
The tested UTM/QEMU/SPICE guest components and services remain operational.
No current impact has been observed to Windows boot, network connectivity, DNS, HTTPS connectivity or the tested guest integration services.
The overall endpoint-health lab remains in progress because additional system-health checks are still planned.
Unexpected values should therefore be cross-checked using other reliable sources before reaching a conclusion.
The device-health investigation demonstrated that an Error status should not automatically be interpreted as failed hardware.
The initial query showed 33 errors, but examining Instance IDs revealed a repeated pattern of virtual ACPI devices rather than 33 unrelated hardware failures.
I learned to use pnputil and PnP device properties to investigate Windows Device Manager problem codes rather than immediately uninstalling or updating devices.
I also learned that finding a driver file does not mean that the driver is appropriate for the system.
Before installing the candidate qemufwcfg driver, I verified that Windows was ARM64 and inspected the INF file itself.
The available INF declared x86 and AMD64 support but did not declare ARM64 support, so I did not force the installation.
This demonstrated the importance of checking operating-system architecture and driver compatibility before remediation.
Finally, I learned that technical troubleshooting should consider actual service impact.
Although several virtual devices currently report Code 28, Windows boots successfully, the tested network services work and the main UTM/QEMU/SPICE guest services are running.
The safest decision at this stage is therefore to document the finding and continue investigating only where there is evidence that remediation is required, rather than making changes simply to remove an error indicator.
ping
Resolve-DnsName
Get-DnsClientServerAddress
Test-NetConnection
Get-ComputerInfo
Get-CimInstance
Get-PnpDevice
Get-PnpDeviceProperty
pnputil
Get-Service
Get-Volume
Get-ItemProperty
Get-ChildItem
Select-String
winver
Windows Driver INF Files
Driver compatibility verification
Windows architecture verification
Driver INF inspection
Virtual machine guest-tools verification
Windows service-status verification
Troubleshooting before remediation
Technical risk assessment
Technical evidence collection
Diagnostic result interpretation
Structured Service Desk troubleshooting
Evidence-based technical documentation
Tools & technical items
Windows 11Windows PowerShellWindows UpdateUTMQEMUSPICEVirtIO NetworkingWindows Plug and PlayWindows PnP UtilityTCP/IPIPv4IPv6DHCPDNSICMPTCPHTTPSipconfigpingResolve-DnsNameGet-DnsClientServerAddressTest-NetConnectionGet-ComputerInfoGet-CimInstanceGet-PnpDeviceGet-PnpDevicePropertypnputilGet-ServiceGet-VolumeGet-ItemPropertyGet-ChildItemSelect-StringwinverWindows Driver INF Files