Troubleshooting¶
When the AI says nothing, refuses, or cannot find a file, the cause is usually earlier in the chain. Start with the Health check.
Run the Health check¶
Admin → Health check → Run all checks. It walks the chain in the order a request travels: Gate itself, Active Directory, sign-in, then the apps and file shares. It changes nothing, takes a few seconds, and marks the first problem Start here. Each row links to its own help page with the fix.
Copy report gives you text to paste into a ticket, or to your AI.
Test one person¶
Health check → Test as a person. Pick someone and Gate walks their whole path: their account, their Active Directory account (read live), the groups the guardrails see, which tools their AI gets, and for each file share what the guardrails say and what Windows says. Shares are opened as that person, read-only.
Test Windows sign-in on a PC¶
On the PC of someone who sees a login page instead of being signed in, open Gate and press Health check → Test this browser. It runs the real Windows sign-in and says who it would sign in as, and whether by Kerberos or NTLM, without signing anyone in.
Common fixes¶
| What you see | Usually | Help |
|---|---|---|
| A login page on a domain PC | Gate opened by IP address, or the browser Group Policy has not reached the PC yet (run gpupdate, then reopen the browser) |
Windows sign-in |
| Sign-in refused after it worked on other PCs | The service account does not allow AES, so this PC got an RC4 ticket | Gate's service account |
| "Cannot find KDC" or no people after connecting | Gate cannot reach a domain controller by DNS or port 88/389 | Connected |
| A person's AI sees no files | Delegation to cifs is missing for that file server |
Delegation |
| A share is missing entirely | Gate cannot read the Group Policy drive maps in SYSVOL | SYSVOL policy access |
| The chat works but has no tools | The chat app is not reaching Gate, or its identity secret does not match | Chat app talking to Gate |
| "Denied" on something people need | No guardrail allows it, or a block wins. Check the audit row, then Try it as a person | Guardrails |
| AI calls stopped for everyone | The license expired and the grace ended, or seats are over the count past 30 days | License |
Let your AI troubleshoot with you¶
Admins can ask their own AI: "Run Gate's health check and tell me what to fix first" or "Why was lchen denied this morning?" See Connect an AI.
All help pages¶
The full list, one page per check: Health check reference.