Here are some issues with CrowdStrike that I have seen and was able to fix or prevent.
Blue Screen of Death (Safe Mode)
To fix the Blue Screen of Death (BSOD) issue, you will need to boot into Safe Mode, but this can be a tedious task, especially if device has encryption and is prompting you for the Recovery key.
Blue Screen of Death (Recovery Mode)
Another option to fix the Blue Screen of Death (BSOD) issue is to use the Recovery menu. Here,you access the Administrator Command Prompt, and make any necessary changes to restore your system.
Device Encryption
If CrowdStrike will be installed on your system with or without permission, you will want to ensure that Device Encryption is turned off. Since 2019, I have made it my duty to disable the feature before issuing a system to end-users or myself. Also, while providing support, I check the status of units previously deployed to see if the setting needs to be adjusted. Should the system experience an issue where a replacement drive has to be given, I do not want the encryption to lock away the data, as the encryption key is not stored in their Microsoft account on a server that is also experiencing issues with CrowdStike.
Corrupted File
You may see a message about a corrupted csagent.sys (CrowdStrike Agent) file. I tend to see this when an end-user reports a printing issue. This is similar to what happens with Malwarebytes and Ricoh multifunction copiers and the task is to reset the print spooler but this is only temporary as the issue will return within a few days. Removing Malwarebytes from the Control Panel is the permanent fix but CrowdStrike does not give the end-user the ability to remove it on their which would lead the the device being compromised.
Halting USB Ejection
A USB drive will automatically receive a scan for threats when connected to your system. If you discover that you have plugged in the wrong one and need to eject it and connect another, you will have to wait until the drive is finished scanning before you can eject safely. This can be a significant issue if you have a slow drive or one with lots of data.
SATA Operation
You may have heard me speak about the SATA Operation for a Hackintosh for some time now. I find that if the BIOS setting is on AHCI rather than RAID ON, restarting will often get the Windows Operating System to boot properly. Only a small fraction will boot to the login screen, then show the BSOD, and reboot.
Stephan Pringle
Latest posts by Stephan Pringle (see all)
- Your Margins Are Pretty Small - Saturday, February 1, 2025
