Help desk interviews test three things: whether you follow a calm, repeatable troubleshooting method, whether you can explain technical ideas to someone who is not technical, and whether you know the basics of networking, Windows and Active Directory. Prepare one troubleshooting routine you can narrate, learn the half-dozen built-in commands in this guide well enough to say what each result means, and have two or three honest stories ready for the behavioral questions.
Who this is for
This guide is for beginners applying for help desk, service desk or desktop support jobs. By the end you will have answer outlines for the questions that come up most often, a way to structure scenario answers, and a short practice routine. The outlines are frameworks to adapt to your own experience, not scripts to memorise, and none of them require invented stories.
The US Bureau of Labor Statistics describes these jobs as diagnosing customers' computer problems and determining their causes, documenting what users report, guiding them through solutions, setting up or repairing equipment, installing and training, and reporting recurring problems. It lists communication, customer service, listening and problem-solving as important qualities. Interviewers are screening for those same things.
A routine you can say out loud
Use the same steps for every scenario question and say them as you go. Interviewers care more about your method than the final answer.
- Clarify. Ask what the user was trying to do, what happened instead, any error message, and when it last worked.
- Scope. Is it one user or many, one device or all, one application or everything?
- Check the simple things. Power, cable or Wi-Fi, correct account, correct password, recent changes.
- Narrow down. Use a tool to split the problem into two halves, such as local versus network, or client versus server.
- Fix and confirm. Apply one change at a time, then have the user verify it works.
- Document and follow up. Record symptoms, cause and fix in the ticket, and report anything recurring.
Steps 1, 5 and 6 map to listening, guiding the user through the solution and documenting the problem, which are the duties employers describe.
Technical questions and answer outlines
What is the difference between an IP address, a subnet mask and a default gateway?
An IP address identifies a device on a network, the subnet mask says which part of the address is the network and which part is the host, and the default gateway is the router the device uses to reach other networks. A good answer adds how you would check them: ipconfig shows the addresses, subnet mask and default gateway for all adapters.
A user says they have no internet. What do you do?
Follow the routine. Then add network specifics:
ipconfig /allAccording to Microsoft's documentation, /all displays the full TCP/IP configuration for all adapters, and without parameters ipconfig shows the IPv4 and IPv6 addresses, subnet mask and default gateway. Look for three things: whether there is an address at all, whether it looks like one handed out by your network, and whether there is a default gateway and DNS server. If a computer is set to obtain an address automatically, ipconfig helps you tell whether the settings came from DHCP, Automatic Private IP Addressing (APIPA) or an alternate configuration. An address you do not recognise from your network's range suggests the computer did not reach the DHCP server.
Then renew the lease:
ipconfig /release
ipconfig /renew/release sends a DHCPRELEASE message and discards the address configuration, and /renew renews the DHCP configuration. Microsoft notes that /release disables TCP/IP on adapters configured to obtain an address automatically, so warn a remote user before you run it and run /renew straight afterwards.
What is DHCP and what happens when it fails?
DHCP automatically provides a device with an IP address and related settings such as the subnet mask and default gateway, as defined in RFCs 2131 and 2132 and described in Microsoft's DHCP documentation. A server leases addresses from a pool, and options such as router and DNS servers are handed out with the lease. If a client cannot reach a DHCP server, it may end up with an automatic private address or an alternate configuration, which is why a strange address in ipconfig /all is a clue. Mention that in a domain, Microsoft documents that unauthorized DHCP servers do not lease addresses, so a new DHCP server must be authorized in Active Directory.
The user can reach websites by IP address but not by name. What now?
That points to DNS. Explain that DNS maps names to IP addresses and that every connection is configured with at least one DNS server. Then show how you narrow it down:
nslookup contoso.com
nslookup contoso.com 1.1.1.1
ipconfig /flushdnsThe first command uses the default DNS server, the second names a different server to query, and ipconfig /flushdns clears the client resolver cache, which Microsoft says you can use to discard negative cache entries when troubleshooting. If the second lookup works but the first fails, the problem is the configured DNS server, not the website. nslookup also reports errors such as "timed out", "No response from server" and "Nonexistent domain", and you should know the difference: the first two mean the server did not answer, and the last means the name does not exist.
What is Active Directory and why does it matter to help desk?
Active Directory Domain Services stores information about objects such as user accounts, computers, printers and shared resources, and provides sign-in authentication and access control. Help desk uses it daily for password resets, account unlocks and group membership changes. A short answer is enough at beginner level: it is the directory where user and computer accounts live, and it is what authenticates a domain sign-in.
What is Group Policy and how would you check what applied to a user?
Group Policy is how administrators control settings for users and computers in an Active Directory environment, applied by membership in sites, domains or organizational units. To see what actually applied:
gpresult /r
gpresult /h report.htmlMicrosoft documents /r as RSoP summary data and /h as saving the report as HTML. You can add /scope user or /scope computer to limit the output, and /user to target another user. You must include an output option such as /r, /v, /z, /x or /h.
A user is locked out or forgot their password. What do you do?
Do not describe a specific tool you have not used. Describe the process: verify the person's identity using the organisation's procedure before you touch the account, reset or unlock through the approved tool, tell the user how to change the password at next sign-in, and record it in the ticket. Interviewers are listening for identity verification, because a reset performed for the wrong person hands them someone else's account.
What is the difference between a hardware and a software problem, and how do you tell?
Look for evidence that separates them: does the problem follow the user to another computer, or the computer to another user? Does it happen with a clean boot or a different profile? Does a hardware indicator, such as a beep code, a drive error or a failed power-on, appear? Answering with a test, not a guess, scores well.
Scenario questions
You will often be handed a short scenario. Practise these three and apply the routine.
| Scenario | What to cover |
|---|---|
| A user cannot print | Clarify one printer or all, one user or all, then check connection, queue, driver and permissions, and confirm with a test page |
| A new employee needs equipment on day one | Account creation, group membership and licences, device setup, and handover with sign-in instructions, all documented in the ticket |
| Many users report slow Wi-Fi at once | Scope the problem as widespread, check for a common cause and escalate to the network team with what you found |
Behavioral questions
Use a plain structure: the situation, what you did, and what happened. Keep it true.
- Tell me about a time you helped someone who was frustrated. Retail and hospitality count. Describe listening, restating the problem, and the outcome.
- Tell me about a time you made a mistake. Name the mistake, how you found it, what you did to fix it and what you changed.
- Tell me about a time you learned a new tool quickly. A home lab is a fair answer, as long as you describe it as a lab.
- How do you handle several urgent requests? Explain how you would triage by impact and number of users affected, and communicate expected timing to each person.
Say "I don't know, here is how I would find out" when that is the truth. It is a stronger answer than a bluff.
Questions to ask them
- How are tickets prioritised and escalated?
- What does the first 90 days look like for a new team member?
- Which systems will I support most: Windows, Microsoft 365, Active Directory?
- How does the team document fixes?
Practice plan
- Build a small lab, such as the one described in the system administrator interview guide, and run each command in this article against it.
- Write three knowledge base entries in symptom, cause, fix format.
- Rehearse the troubleshooting routine aloud on a friend.
- Prepare two behavioral stories.
- Update your resume using the entry-level IT support resume guide.
Checklist
- You can state the six-step routine without notes.
- You can explain what
ipconfig /all,/release,/renew,/flushdns,nslookupandgpresult /rshow. - You can describe DHCP, DNS and Active Directory in two sentences each.
- You have two honest behavioral stories.
- You have questions ready for the interviewer.
References
- US Bureau of Labor Statistics, Computer Support Specialists: https://www.bls.gov/ooh/computer-and-information-technology/computer-support-specialists.htm
- ipconfig: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/ipconfig
- nslookup: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/nslookup
- gpresult: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/gpresult
- What is DHCP Server in Windows Server: https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-top
- Active Directory Domain Services overview: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview
- DNS in Windows and Windows Server: https://learn.microsoft.com/en-us/windows-server/networking/dns/dns-top
Comments
Questions and tips are welcome. Comments are checked by the EpiFive team before they appear; please do not share passwords, phone numbers or other private details.