Architect IT: Are you seeing BSoD with Windows 11 desktops?
Posted by aypd@reddit | sysadmin | View on Reddit | 24 comments
Sending this out as we are finding out about other Architect offices having the same issue we've been fighting for almost a week. We have Windows 11 24H2 on our company systems and it started in with BSoDs last week randomly all around the office.
What we've gotten so far from MS crash dump analysis is that "something" is corrupting the memory heap for "services.exe". They had me apply gflags.exe monitoring of "services.exe" so the next time there's a crash, the whole heap will be saved to the crash dump.
As of today, we now know of at least two, maybe three other Architecture firms that are facing the same issue.
AIBirthingVat@reddit
I'm dealing with something similar. Are you getting CRITICAL_PROCESS_DIED bugcheck errors? When you run windbg analyze -v is it showing the process that died was "services.exe"?
I'm only dealing with 11 machines. I formatted / reinstalled Windows 11 a few weeks ago and the BSOD persisted. Noticed the computers I left in the new computer staging OU were not bluescreening. As soon as I moved one out, it started bluescreening, which clued me in to the cause being something related to GPOs.
Still investigating though.
aypd@reddit (OP)
Yes, that is the exact error we received repeatedly on all 200 systems, services.exe. MS gave us a nebulous warning about LAPS and that maybe…perhaps…possibly we should disable it in AD. After disabling we saw no relief.
AIBirthingVat@reddit
Also ... are you running Server 2022 or Server 2025 ?
aypd@reddit (OP)
We have a mix of 2019 and 2022 (and a couple 2012's shhhh) both in on-prem VMware and in Azure. No server OS was affected by whatever this was, only EVERY windows 11 desktop in the company. Windows 10 was not affected either.
AIBirthingVat@reddit
I haven't disabled LAPs on the server itself, or changed any server settings, I have just unassigned the group policy that enables LAPS on the workstations. At this point, we're past the 24 hour mark so I am cautiously optimistic.
What I can't understand is why is it affecting us? We cannot be the only companies using LAPs with Active Directory. So it has to be something in the configuration. I've documented all of my configuration steps so once this is resolved I will bring this back into a test environment and see if I can figure out the problem.
aypd@reddit (OP)
Just now talking with MS support, they are "suggesting" there is an issue "under investigation" involving LAPS affecting services.exe.
AIBirthingVat@reddit
Did the issue turn out to be that you had the LAPS GPO assigned to a computer OU that you did not grant LAPS permission to using Set-LapsADComputerSelfPermission ??
Brr_123@reddit
Hey, did the issue resolve for you or did you find out what's causing it? We just started seeing BSoD as well in a few of our computers on 24H2. Same as you, something is corrupting the memory heap...
aypd@reddit (OP)
No joy for us. Every system I put the debugging tools on stopped having BSOD issues. Never could provide MS with enough information. Never got further than “something” was corrupting the memory for services.exe. We ended up spending two horrible weeks re-imaging ALL the systems in the firm. It was horrible but all the desktops are running better than ever.
saysjuan@reddit
No.
GAP_Trixie@reddit
We had some lenovo win11 devices cause bluescreens in higher frequency the last few months, like 4.
Another reason why we switch to dell. Repair never told us what was causing it.
aypd@reddit (OP)
Oh that sucks.
dented-spoiler@reddit
I'm seeing idiots disable laptop lid options using gpo...
That's my week.
Silent331@reddit
Have over 100 W11 24H2 devices on latest updates across multiple clients. No random bluescreens reported. More likely with something common amongst your user base. We have seen some random software stop working with 24H2 but those are all fixed updating that software from the vendor
aypd@reddit (OP)
And you are an Architecture firm? Users of Revit, Rhino, Enscape, Bluebeam, etc.?
ace00909@reddit
Manufacturing here. We’re about halfway through our engineers getting migrated over. Revit, Rhino, Bluebeam, Autocad. No bsod reports as of right now.
Silent331@reddit
We are not
Chronoltith@reddit
Have you correlated this with any updates the machines have taken? Patch Tuesday stuff? AV/Malware updates? Firmware and drivers? Have you rolled anything back?
Notionally seeing this as an architecture industry only thing may be a perceptual bias unless you can nail it down to a common toolset.
aypd@reddit (OP)
This is what I'm thinking too. There doesn't appear to be a widespread BSoD issue, but if it's contained to Architecture firms then perhaps a windows update is affecting an Autodesk service or something. Last week was our last ring for windows updates.
Now checking to see if our Marketing department has BSoDs and/or Architecture software installed.
Chronoltith@reddit
I recommend reviewing the set of updates from May patch Tuesday and then dig in to see if there are any reports of similar BSODs in the wild.
aypd@reddit (OP)
Been searching since end of last week but have not found any threads blowing up anywhere, so after we heard a couple other firms are having this issue, I decided to post here.
Rishiboi@reddit
I have some older 8th intel laptops that were recently deployed come back to us due to bsod. They were all clean installs of 24H2. Users with different roles. I has to be from a recent windows update. Keeping an eye on this.
CPAtech@reddit
Are you using the same security software as the other firms?
aypd@reddit (OP)
Checking on this. We are Windows Defender enterprise.