January 11, 2021 release of Feature Updates 1909 + 2404 cause Blue Screen of Death on 5 devices including Dell Latitudes and Microsoft Surfaces after deleting system32 file
Please describe the issue in 2-3 sentences. Include what you're trying to accomplish when the issue occurs.
We currently put all patching on pause, so our vulnerabilities are starting to pile up. I would like to find a solution on how to install these feature updates without the patches failing or causing a blue screen of death.
When did it begin and how often does it occur?
The patch group that caused the BSODs were released by Microsoft on January 11. The users did not install and reboot until January 22 which caused 5 of our devices to go to a Blue Screen of Death.
What errors do you see?
0xc00000f
0xc0000225
File: \windows\system32\winload.efi
Microsoft Surface Drivers Errors
What's the environment and are there recent changes?
We host Active Directory on a Windows 2012 server on an AWS EC2 instance. We also use 365 for our apps and 365 groups which pulls from AD every 15 minutes. We use Kaseya VSA for our vulnerability management tool. In order to make sure it wasn't Kaseya causing the issues, I manually installed the patch locally on one of the effected machines and received the same BSOD screen.
What have you tried to troubleshoot this?
Thankfully, we have everything backed up to OneDrive, so we just provisioned new laptops with our up to date image and we put all additional patches on hold around 1909 and 2404. Unfortunately, we do still have about a dozen devices that need to install the updates, but I do not want to push them until we know they are not going to break user systems. I have tried a number of different troubleshooting techniques including updating BIOS and firmware that were showing errors on the surface, clearing the updates and running them manually on the local machine, booting up, clearing all services except Microsoft services, and installing updates, and they still seem to fail or lead to a BSOD on reboot. The only solution I have found that seems to work is a full reformatting of the hard-drive and manually installing all updates from our latest image, but this takes up too much time to do for all of our devices.