rdr_file_system 0x27 BSOD After Windows 10 2004 update, but only on domain profiles

Anonymous
2020-06-08T14:50:36+00:00

Good morning, I am having an issue on some PCs recently after some PCs received the Windows 10 2004 build update. After receiving said update, the machines will BSOD with a 0x027 error code when logging into a domain profile while connected to the network.

If I remove the network cable from the PC and log into a domain account that was cached on the machine before the update, it will log in without issues and then I can connect it to the network and it seems to resume function. I can also sign into a local account on the machine, with and without network connectivity. 

I used Bluescreen View to look at the dumps which seem to be showing rdbss.sys and mrxsmb20.sys as drivers that are causing the issue. I have tried updating network drivers etc from the vendors websites and not relying on Windows to, but am still having the issue.

The other bizarre thing is if the PC crashes 3 times, boots into the recovery mode to try and repair your PC and I restart it, it will then log in once to a domain account and seem to be functioning, however if the PC is restarted it will BSOD on log in.

Has anyone seen or heard of any issues like this since this update? Could it be something out dated on the server that is causing the issue to happen to the machines on the newer OS? I can't help but feel like it has something to do with folder redirection and that is why cached accounts will work with no network connection however I am stumped how to get around this other than not updating every other machine, and rolling back if possible (I had a PC that was upgraded from Windows 7 to 10 and went straight to the 2004 build and BSOD'd, I tried to roll back to Win7 and system will not boot at the moment saying it is missing system files etc.).

I have some mini dumps I can share if that would help as I would like to get to the bottom of this if possible.

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

167 answers

Sort by: Oldest
  1. Anonymous
    2020-09-09T07:25:12+00:00

    Hi,

    i googled a lot and found nothing. You seem to be the only one who was able to solve this problem without switching off offline files.

    Could you please discribe your solution a little more  in detail.

    Is your Groupe Policy the one of your netzwork or the one of the computer. How is the correct title of the groupe policy you changed. In which folder can i find the policy?

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2020-09-09T09:44:10+00:00

    Hi 

    The same problem. I hope Microsoft will fix ASAP.

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2020-09-09T13:45:52+00:00

    @ulf_sch, no GPOs were changed.

    Initially, I stopped and disabled Offline Files service on the affected computers to allow logons.

    Then I experimented. I reset the Offline Files cache by setting the registry entry I described, re-enabling the Offline Files service and rebooting. Also described here as Method 2: https://support.microsoft.com/en-us/help/230738/how-to-re-initialize-the-offline-files-cache-and-database-in-windows-x. I had wondered if that would help, and another post here suggested that it did, although in a different context.

    I found users could work normally, and redirected folder data was syncing to the server. However, a drive mapped (by Group Policy Preferences) to a DFS share did not work. The drive was present but couldn't be browsed. If I browsed the DFS root, I found the only DFS share present was the folder redirect share, and that only because Offline Files was on and it was offline but cached. On the affected machines, I ran a script that unmapped the drive and then remapped it to the non-DFS share to which DFS redirects:

    NET USE S: /D

    NET USE S: \SERVER\SHARE

    I'm running the script from the Startup folder of the Start menu since it is (I hope) a temporary hack, only 4 computers were involved, and I didn't have confidence that what worked on one machine would work on all of them. I left Group Policy alone for the unaffected machines. On a large site, I'd probably use Group Policy to reset Offline Files, enable the service, and remap the drive, and then scope it to affected machines one at a time and verify it worked.

    Generally speaking, the remainder of the DFS shares come back after a while, and I suspect that it's when Offline Files decides to online the shares. That seems to take a while after logon on affected machines. On non-affected machines, I don't think the shares are ever offlined.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2020-09-09T20:10:08+00:00

    We have same issue on serveral updated Windows 10 Pro 2004 Systems when domain user logging on with offline files activated.

    A reset of the CSC cache has not helped permanently.

    The following policy entry has at least fixed for us the bluescreen

    rdr_file_system 0x27 BSOD

    when in Airplane mode and/or not connected to any network during domainlogon in conjunction with reset of CSC Cache Folder, but reset was not on all devices needed.

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetCache]

    "GoOfflineAction"=dword:00000000

    "SlowLinkEnabled"=dword:00000001

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetCache\SlowLinkParams]

    "*"="Latency=8"

    The point is that the latencycheck for going offline will be here lowered down from higher standardsettings and set to 8ms (Tested with LAN and WLAN connection to Server to avoid red cross on drive for offline share connection when connection comes back) and we have tested this sucessfully with no bluescreens now since several days on affected systems

    Link to Microsoft article where usage is described:

    https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/enable-always-offline

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2020-09-09T21:51:10+00:00

    Interesting, René. 

    It looks like your observation is that the problem occurs when the computer switches between offline and online mode; is that correct? So you're trying to keep it...offline? Or online?

    Was this answer helpful?

    0 comments No comments