Troubleshooting

• Check the 'Awaiting approval' list first; new devices are not managed until you approve them.
• Make sure the Client service is running on the PC.
• Make sure the client was installed with an enrollment bundle from the current Master. If you reinstalled the Master without restoring its backup, existing clients will reject the new key.
• Check that both PCs are on the same subnet, or add the Master's address manually.

A device is shown as Offline when there has been no contact for about 95 seconds. Common causes:

• The PC is powered off or the network cable is unplugged.
• A third-party firewall blocks TCP 47811 or UDP 47810.
• The PC is on a different subnet or VLAN; beacons do not cross routers, so add the Master's address manually on the client.
• The Master PC's IP address changed; use a static address or DHCP reservation.

Test connectivity from the gaming PC, and check the Windows Firewall rules for both ports:

Test-NetConnection -ComputerName 192.168.1.10 -Port 47811
Get-NetFirewallPortFilter | Where-Object { $_.LocalPort -in @('47810','47811') } | Get-NetFirewallRule | Select-Object DisplayName, Enabled, Direction, Action

This state is normal after a mode change and clears after a restart. If it persists after restarting:

1. 1Make sure the PC actually restarted (and was not just shut down with Fast Startup enabled).
2. 2Send a Restart command from the Master and wait for the device to reconnect.
3. 3If the state changes to Error, check the error details in the Master and collect diagnostics.

This is the intended behavior when the device is protected. To make a permanent change:

1. 1Put the device into Maintenance mode (for example one-reboot maintenance) and restart it.
2. 2Confirm the Master shows the device as Unprotected before making the change.
3. 3Make the change, then re-enable protection.

If certain data must always persist (such as game save files), consider excluding that specific folder.

• Check that the device is Protected and not in Maintenance mode or an active scheduled window.
• Check that the file is not inside an excluded folder or excluded registry key.
• Check that the volume holding the file is protected; the games drive may be unprotected.
• If the state is 'Reboot required', protection has not taken effect yet.

The warning appears when the overlay passes its threshold (80% by default). The usual cause is a long session or large downloads to a protected volume.

1. 1Restart the PC at the next opportunity to clear the overlay.
2. 2If the warning keeps coming back, increase the maximum overlay size if memory or disk space allows.
3. 3Schedule regular restarts, and avoid large downloads to protected volumes.

The Unified Write Filter is available only on Enterprise, Education and IoT Enterprise editions. If the PC runs Windows Pro, RebootGuard uses the VHDX engine instead. This is expected, not an error.

(Get-CimInstance Win32_OperatingSystem).Caption

If the edition is supported but the feature is not enabled, the wizard may ask you to enable the Windows feature for the filter and restart.

If a game is updated on a protected volume, the update is discarded at reboot and the game asks to update again.

• Update games in Maintenance mode or during an overnight scheduled window.
• Or move the games library to an unprotected drive (such as D:) if that fits your security policy.
• Disable automatic updates in launchers during business hours to avoid filling the overlay.

Games with kernel-level anti-cheat, such as Riot Vanguard (VALORANT, League of Legends), are still in testing. RebootGuard does not modify anti-cheat software and does not disable Secure Boot, TPM or HVCI, which Vanguard may require.

• Make sure Secure Boot and TPM are enabled if the game requires them.
• Install and update the game and its anti-cheat in Maintenance mode, then re-enable protection.
• Check the Compatibility page for the latest test results.

Confirm-SecureBootUEFI
Get-Tpm | Select-Object TpmPresent, TpmReady

• Check that the time and time zone are correct on the Master and on the devices.
• Make sure the devices were powered on and connected at the start time.
• Make sure the window is no longer than 7 days and the end time is after the start time.

Get-Date
Get-TimeZone
w32tm /resync

1. 1Send a Restart command from the Master.
2. 2If it does not respond as expected, put it into one-reboot maintenance to inspect it.
3. 3On VHDX-engine PCs, use the fallback entry in the boot menu if the protected system cannot boot.
4. 4Always keep a copy of the enrollment bundle and your license details so you can rebuild the Master if needed.

When you contact support, you may be asked for a diagnostics file. Diagnostic logs are sent to support only with your explicit consent.

• Diagnostic logs contain no passwords, user files or game data.
• They include technical information such as engine state, service events and Windows version.
• Contact support from the Support page and include a description of the problem and steps to reproduce it.