CrowdStrike Resolution Guidelines

CrowdStrike Resolution Compilation

1

CROWDSTRIKE RESOLUTION COMPILATION

Contents Contents ........................................................................................................................................................ 2 CrowdStrike Resolution Guide ...................................................................................................................... 3 Citrix Not Working After Resolution ............................................................................................................. 7 First Fix ...................................................................................................................................................... 7 Second Possible Fix ................................................................................................................................... 7 Bypass bitlocker ............................................................................................................................................ 7 P360 Devices not Working ............................................................................................................................ 8 Devices in Boot Loop after removing files after UEFI and Secure boot verification ..................................... 9

2

CROWDSTRIKE RESOLUTION COMPILATION

CrowdStrike Resolution Guide

▪ From the Windows Recovery screen, o

C lick “See advanced repair options . ”

▪

Click “Troubleshoot.”

▪

Select “Advanced Options.”

3

CROWDSTRIKE RESOLUTION COMPILATION

▪

Select “Command Prompt.”

You will be prompted to enter a BitLocker recovery key to continue. Please reach out via the “Bitlocker Recovery Keys” command center chat in Teams and provide your PC ’ s Hostname or serial number. If you do not have access to the “Bitlocker Recovery Keys” command center chat, please reach out to your IT leader for assistance.

4

CROWDSTRIKE RESOLUTION COMPILATION

▪ Once you see a command prompt, Type: del C:\Windows\System32\drivers\CrowdStrike\C-00000291-00000000- 00000017.sys

▪

Press “Enter” on your keyboard.

1. Type: Exit and press Enter.

2. Select “Turn Off your PC” from the menu.

5

CROWDSTRIKE RESOLUTION COMPILATION

3. Power on your PC and it should boot into Windows as normal.

6

CROWDSTRIKE RESOLUTION COMPILATION

Citrix Not Working After Resolution

First Fix

Second Fix

▪

Reset Citrix

▪

Cmd gpupdate \force

▪ Control panel configuration manager, actions tab, machine policy retrieval ▪ Reboot

Bypass BitLocker

▪ Boot to windows bootable usb key ▪ Click Next ▪ Click on repair your computer

7

CROWDSTRIKE RESOLUTION COMPILATION

▪ Navigate to Troubleshoot -> Advanced Options -> Command Prompt ▪ Skip Bitlocker for this drive ▪ Type bcdedit /set {default} safeboot network ▪ Close command window and turn off computer ▪ After turning on computer, log into windows. You are now in safe mode. ▪ Use File Explorer to delete c:\Windows\System32\drivers\CrowdStrike\c- 00000291*.sys ▪ Run CMD as an administrator. ▪ Type bcdedit /deletevalue {default} safeboot ▪ Restart and done.

P360 Devices not Working

▪

1.Bios

▪

2.Devices

▪

Ata drive setup

▪ Change "configure sata as" from intel rst optane to ahci ▪ Do normal steps then go back in and change it back after

8

CROWDSTRIKE RESOLUTION COMPILATION

Devices in Boot Loop after removing files after UEFI and Secure boot Verification

▪

Use Windows Bootable USB Key

▪

Click Next

▪

Click on Repair your computer

▪ Navigate to Trouble Shoot -> Advance Options -> Command Prompt ▪ Skip Bitlocker for this drive ▪ Type bcdedit /set {default} safeboot network ▪ Close command window and turn off computer ▪ After turning on computer, log into windows. You are now in safe mode. ▪ The computer will begin to start up- you are now in safe mode ▪ Run CMD as administrator ▪ Type bcdedit /deletevalue {default} safeboot ▪ Restart o This should fix the boot loop

9

CROWDSTRIKE RESOLUTION COMPILATION