📊 Windows Health Score Reference Guide
Keeping your Windows environment healthy requires visibility into key system signals. The Windows Health Score provides a simple but powerful way to quantify domain and system health based on real diagnostic indicators.
This scoring system helps administrators quickly identify risks, prioritize fixes, and maintain stable performance across systems.
🎯 What Is the Health Score?
The Health Score starts at 100 and deducts points based on detected issues across:
- Boot & logon performance
- Group Policy processing
- Domain trust integrity
- DNS & network health
- Certificate validity
- Critical services
The lower the score, the higher the operational risk.
⚠️ Health Score Deduction Rules
🖥️ System & Performance Issues
| Check | Deduction | Trigger Condition |
|---|---|---|
| Windows 11 24H2 detected | -5 | Known login & UAC issues |
| Boot time > 120s | -3 per event | Event ID 100 |
| Logon time > 120s | -10 | Event ID 200 |
| GP processing > 30s | -10 | Slow Group Policy |
🔐 Domain & Trust Issues
| Check | Deduction | Trigger Condition |
|---|---|---|
| Secure channel broken | -15 | nltest returns ERROR |
| Secure channel test failed | -15 | Test-ComputerSecureChannel = False |
🌐 DNS & Network Issues
| Check | Deduction | Trigger Condition |
|---|---|---|
| DNS SRV record failed | -10 each | _ldap, _kerberos, _gc missing |
| DNS port 53 unreachable | -10 per server | DNS connectivity issue |
📜 Certificate Issues
| Check | Deduction | Trigger Condition |
|---|---|---|
| Expired CRLs | -20 | Expired revocation lists |
| Expired Root CA | -5 | Certificate expired |
⚙️ System Configuration Issues
| Check | Deduction | Trigger Condition |
|---|---|---|
| Critical service stopped | -10 each | Netlogon, DNS Client, etc |
| SyncForegroundPolicy = 1 | -10 | Always wait for network |
| SYSVOL not ready | -10 | SysVolReady = 0 |
📊 Score Interpretation
🟢 80–100
Healthy
Healthy
🟡 50–79
Needs Attention
Needs Attention
🔴 0–49
Critical
Critical
✅ Why This Matters
A structured scoring model allows you to:
- Detect hidden domain issues before users notice
- Prioritize troubleshooting based on impact
- Measure improvement over time
- Standardize health reporting across environments
