Windows self-help: what staff can safely try before logging a ticket
Four things resolve a large share of everyday Windows faults, and any staff member can safely do all four: restart the computer, sign out and back in, work out whether the fault follows you to another device, and check the physical connections. Blue Arc IT Solutions asks for the restart first, because in Windows a restart and a shutdown are not the same thing.
Start here
What is the difference between a restart and a shutdown in Windows?
How do you check how long it has been since your PC was restarted?
Should you sleep, hibernate or shut down a work laptop?
Restart, do not shut down
This is the most common misunderstanding we still see on the service desk in 2026, and it is not the user's fault. The two options sit next to each other in the same menu and look like they do the same job. They do not. A feature called Fast Startup is switched on by default on any Windows PC capable of hibernation. When you shut down, Windows closes your programs and signs everyone out, then saves the core of Windows, along with the drivers that run your screen, Wi-Fi and printers, into a file on the disk called hiberfil.sys instead of clearing them. Switching the machine on again reloads that saved copy rather than building a fresh one. That is why a shutdown can leave a fault exactly where it was.
Microsoft's own documentation settles it in one line: "The Fast Startup setting doesn't apply to Restart." A restart performs a full boot cycle. A shutdown, on almost every machine in your office, does not. See our guide to the difference between a restart and a shutdown for the full mechanism, and Microsoft's article on Fast Startup and hybrid shutdown for the source.
The four steps, in order
Restart the computer: Start, then Power, then Restart. Save your work first, because a restart closes everything. Note the time you did it, because that is the single most useful fact you can hand the service desk.
Sign out and sign back in: Start, your account picture, Sign out. This rebuilds your user session and re-authenticates you, which is what clears most Outlook, Teams, OneDrive and SharePoint problems that appeared with no change to the machine.
Find the boundary of the fault: does it happen on your phone as well as your laptop, to a colleague as well as to you, in one application or all of them, at home as well as in the office. Ten seconds of thought here regularly saves an hour of ours.
Check the physical layer: cables seated at both ends, the dock's own power supply, the monitor input, and the right Wi-Fi network rather than a guest or neighbouring one. Docks in particular fail in ways that look exactly like software.
What not to try
Do not install registry cleaners, driver updater utilities or PC optimisers. Blue Arc IT Solutions does not permit them on managed fleets: at best they change nothing measurable, and some bundle additional software you did not ask for. If a machine is slow, tell us and we will find out why.
Do not disable or uninstall security software to test whether it is the cause. If you suspect it is, tell us and we will test it properly.
Do not turn Fast Startup off yourself. Microsoft's guidance is explicit that "Disabling Fast Startup is not recommended", and switching hibernation off to achieve it removes hibernate as well. A restart already gives you the clean boot you were chasing.
Do not keep retrying a password after a lockout warning. Each attempt extends the lockout and buries the real cause, which is often a saved credential on another device retrying in the background.
Hold the power button only when the machine is genuinely unresponsive, and tell us that you did it. A forced power cut during an update or a disk encryption operation turns a small problem into a larger one.
When to stop and log a ticket immediately
Some things should not be troubleshot at all. Phone us rather than experimenting if you see a multi-factor approval prompt you did not trigger, an unexpected message asking you to approve a payment or re-enter credentials, a BitLocker recovery key screen at startup, files renamed in bulk or a ransom note, a caller claiming to be from a helpdesk or vendor and asking for remote access, or a device that has been lost or stolen. A restart will not undo a compromise, and it can destroy the volatile evidence that tells a responder what actually happened.
Does Windows still force a monthly restart?
On most small and mid-sized business fleets, yes, and it is worth being precise about why, because the answer is widely misreported. Hotpatch updates install security patches without a restart, concentrating patch restarts into four baseline months a year, January, April, July and October, and leaving the other eight restart-free. Microsoft Learn states the scope directly: hotpatching "is available for Windows 11 Enterprise, version 24H2 and later".
That edition qualifier is the catch. Microsoft 365 Business Premium, which is what most Australian businesses of 10 to 300 staff run, grants Windows 11 Business upgrade rights, a Pro-based licence, not Windows 11 Enterprise. Business Premium does appear on Microsoft's list of licences eligible for hotpatch updates, which causes understandable confusion, but the device edition requirement is a separate test and still names Enterprise. Devices that are not eligible are offered the standard latest cumulative update instead, and that does require a restart.
So if your business runs Business Premium, Patch Tuesday still brings a monthly restart, and that monthly restart is the floor rather than a substitute for the weekly one. If you run Microsoft 365 E3 or E5, it is worth checking the hotpatch quality updates report in Intune, because Microsoft enables hotpatch by default for all eligible devices, so your machines may already be going eight months a year without a forced reboot.
How Blue Arc IT Solutions helps
Blue Arc IT Solutions has supported Australian businesses since 2004, delivering nationally from Canberra. Our latest client survey recorded 96 per cent satisfaction with response time, 94 per cent with resolution and 97 per cent overall. We set patching, update and restart policy centrally through Microsoft Intune so staff are not left to manage it themselves, and we would rather explain the restart once than answer the same ticket forty times. See our managed services, read how to choose an IT provider in Canberra, or get in touch.
Last reviewed: 24 August 2026, against Microsoft Learn documentation on Fast Startup and hotpatch updates.
Frequently asked questions
Is restarting really the first thing to try?
Yes, and it is not a brush-off. A restart is the only power option that always performs a full boot cycle: it reloads drivers, releases file locks, completes pending updates and clears leaked memory. It also removes an entire branch of the diagnostic tree for whoever picks up your ticket.
Is shutting down the same as restarting?
No. Fast Startup is switched on by default on any Windows PC capable of hibernation, so a shutdown saves the core of Windows and its loaded hardware drivers to a file on disk (hiberfil.sys) and reloads them when you switch the machine on. Microsoft states that the Fast Startup setting does not apply to Restart. Only a restart performs a full boot cycle.
How often should staff restart a work computer?
At least once a week, and before logging a ticket. Do not rely on Windows to do it for you: on a Microsoft 365 Business Premium fleet Patch Tuesday still forces a monthly restart, and on Windows 11 Enterprise devices receiving hotpatch updates only four months a year carry a baseline update that requires one. Neither cadence replaces a weekly restart.