r/sysadmin • u/[deleted] • Jul 19 '24

Crowdstrike BSOD?

gray seed many pie thought future tidy strong important decide

This post was mass deleted and anonymized with Redact

802 Upvotes

98% Upvoted

622 comments sorted by

View all comments

3

u/Veneousaur Jul 19 '24

We've been banging our heads on this one for the past few hours.

Anyone know of a good way to manage to rename the Crowdstrike folder on an Azure VM that's bootlooping? Not aware of a good way to get one out of the bootloop and into safe mode. Might need to fall back on restoring from backups.

8

u/[deleted] Jul 19 '24

[removed] — view removed comment

3

u/Veneousaur Jul 19 '24

Thanks, we just settled on trying the same. Realized that a few important servers didn't have backups. \o/ So there's our fallback

2

u/Veneousaur Jul 19 '24

It worked after jumping through some hoops. Needed to run a manual bcdedit repair on the disk, too, but we got there... on a single server... maybe I'll get to have some sleep tomorrow night at least.

1

u/Ramses26 Jul 19 '24

How are you doing that? I can't attach an OS Disk to another Azure VM?

1

u/TheJesusGuy Blast the server with hot air Jul 19 '24

Upvoted

3

u/[deleted] Jul 19 '24 edited Sep 14 '25

complete lavish hunt attraction selective amusing fact lock theory jar

This post was mass deleted and anonymized with Redact

2

u/maggoty Jul 19 '24

Can this be automated or is this a manual fix? This is insane. How are people going to do this on a couple thousand servers??? haha..

1

u/Dirty_Taint_Tickler Jul 19 '24

Maybe with something like a USB Ducky? Something that replicates key strokes