The Microsoft Recovery Tool was updated 7/22/2024 as version 3.1. While fundamentally there are no functional changes to the tool, for the Recover from WinPE option, we have expanded the logging, rea...
Updated Aug 01, 2024
Version 14.0
Blog Post
12 MIN READ
New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints
For our organization, we solved many user's CrowdStrike app-related issues for Windows10 OS,
Hold the power button for 10 seconds to turn off your device and then press the power button again to turn on your device.
2. On the Windows sign-in screen, press and hold the Shift key while you select Power > Restart.
3. After your device restarts to the Choose an option screen, select Troubleshoot. On the Troubleshoot screen, select Advanced options
4. Pick Startup Settings and hit "Restart" and for the next step keep the BitLocker key ready if the drive is encrypted with the BitLocker.
5. After entering the BitLocker keys pick option # 4 which is "Safe Mode"
6. Next login with the OS Windows administrator account and the password if the account is renamed or using the LAPS password login to Safe Mode.
7. Type is Run or Search CMD to open up the command prompt.
CD C:\Windows\System32\drivers\CrowdStrike and hit Enter.
8. Once in the CrowdStrike directory, locate the file matching “C-00000291*.sys”. To do this, type the following command and then press Enter:
9. Permanently delete the file(s) found. To do this, type the following command and then press Enter.
del C-00000291*.sys
13. Type Exit from CMD and Safe Mode and restart your system to sign in normally.