crowdstrike causing Windows Server boot loops and solutions not working 2026

Todd Frye 0 Reputation points
2026-06-23T18:48:23+00:00

We are trying to find the root cause and solution outside of wiping the C: Drive OS clean.

Windows for business | Windows Server | User experience | Other

1 answer

Sort by: Most helpful
  1. Ivy Bui (WICLOUD CORPORATION) 505 Reputation points Microsoft External Staff Moderator
    2026-06-24T03:38:33.0633333+00:00

    Hello Todd Frye,

    Thank you for contacting Microsoft Q&A.

    To help us better understand the issue, could you please confirm the following:

    When the boot loop occurs, do you observe any bugcheck (BSOD) or blue screen error before the server restarts?

    • For example, do you see a stop code such as 0x50 or 0x7E?
      • Or does the server simply display the Windows logo and then restart without showing a blue screen?
    1. Have you already tried deleting the CrowdStrike file C-00000291.sys* as part of your troubleshooting?

    If not, please try the following steps:

    1. Boot Windows into Safe Mode or the Windows Recovery Environment (WinRE).
    2. Navigate to: C:\Windows\System32\drivers\CrowdStrike
    3. Once in the CrowdStrike directory, locate the file matching “C-00000291*.sys”. To do this, type the following command and then press Enter: dir C-00000291*.sys
    4. Delete the file by following command: del C-00000291*.sys
    5. Reboot the server normally and check whether the issue persists.

    Please let us know the results, especially whether a BSOD is displayed and, if so, the exact stop code shown on the screen. This information will help us determine whether the issue is related to the known CrowdStrike boot-loop scenario or another underlying cause.

    Hope you found something helpful here. Please let me know if you need further assistance.

    If this answer could solve the issue, it's appreciated to accept the answer.

    Thank you again for your patience and support!
    Ivy Bui

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.