Complete procedures with a way back.

Windows service Error 1053 means the service did not answer the Service Control Manager in time, Error 1067 means the service process terminated unexpectedly, and Error 1069 means Windows could not log on with the configured service identity. This guide separates those failure paths, preserves event and configuration evidence, and applies the smallest reversible repair.

Build a Generation 2 Hyper-V VM behind a reviewed external switch, enforce ProductionOnly checkpoint lifecycle, and prove independent application-consistent restore.

Build a secure two-server Microsoft DNS service for Active Directory with replicated forward/reverse zones, controlled recursion, authenticated updates, staged scavenging, concrete failover tests, and supported recovery evidence.

Plan, promote, harden, validate, and back up a new two-controller Windows Server 2025 forest without exposing credentials or treating a VM snapshot as directory recovery.

Build an authorized two-server DHCPv4 service with reviewed IPAM, inactive-first scope creation, internal DNS options, shared secure updates, reservations, load-balanced failover, relay and maintenance tests, and isolated recovery.

Validate PKI, expose source-restricted WinRM HTTPS, build a parameter-constrained JEA role, test every denied path, protect transcripts, and rehearse renewal and rollback.