New Updated Microsoft Tool Resolves CrowdStrike-Related BSOD Errors

Microsoft has rolled out an update to a recovery utility aimed at helping IT teams fix problems triggered by last week’s troublesome CrowdStrike update. This new tool forms a bootable USB drive designed to facilitate the recovery process for Windows machines that have been compromised. When I first reported on the CrowdStrike issue in Windows, it was a serious outage but not necessarily out of the ordinary. However, as last Friday progressed it became clear this was a very notable IT collapse. Some 8 million global PCs were affected by the problem, covering massive international organizations. In some outlets it was called a global IT apocalypse.  Microsoft initially launched a tool to mitigate the issue, while CrowdStrike rolled out its own problem-solving software patch. Now, Microsoft says in its official documentation it has taken user feedback on board and has updated its tool.  CrowdStrike Update Sparks Major Disruptions The issue started when an update from CrowdStrike caused major disruptions, leading approximately 8.5 million Windows devices to experience the Blue Screen of Death (BSOD). Although CrowdStrike has deployed a patch to address the problem, many affected devices haven’t received it automatically. Some IT administrators have managed to fix the issue by rebooting the PCs multiple times or manually booting into Safe Mode to eliminate the problematic file. The Microsoft utility simplifies the repair procedure by leveraging the Windows Preinstallation Environment (PE) on a USB drive. This tool then accesses the affected machine’s disk and automatically removes the troublesome CrowdStrike file, allowing the system to boot properly. The tool bypasses the need to boot into Safe Mode or use admin rights, as it operates independently from the local Windows installation. For disks that use BitLocker encryption, the tool will request the BitLocker recovery key before commencing the fix. Extra Features and Options This Microsoft Recovery Tool, downloadable from the Microsoft Download Center, provides two repair methods: one utilizing safe boot and another that creates ISO or USB media. It also resolves issues like ADK detection when the Windows Driver Kit is installed and verifies the size of the USB disk. The tool offers two recovery options: from WinPE, which doesn’t need local admin rights but requires manual BitLocker recovery key entry, and from Safe Mode, which doesn’t require the BitLocker key but needs admin account access. For systems that can’t handle USB connections, Microsoft advises using PXE or reimaging the device. Guidance for IT Administrators Microsoft suggests IT administrators test the tool on a few machines prior to widespread deployment. Detailed instructions and additional resources can be found on the Tech Community website and Microsoft’s support site. These resources are designed to help IT administrators swiftly address the issues caused by the faulty CrowdStrike update. Microsoft has also detailed separate recovery steps for Windows Virtual Machines (VMs) running on Azure, aiding IT administrators in restoring functionality to compromised virtual environments.