BSOD WINLOGON_FATAL_ERROR (c000021a)

Question

I have a 2012 R2 DC server running on ESXI that all of a sudden is rebooting after 5min of being online. I've run sfc /scannow and DISM repairs. It stays online in safe mode with networking but normal mode continually reboots. Not seeing anything obvious in Event viewer either. Any assistance would be appreciated.

Here's a pastebin of the dump analysis:

https://pastebin.com/Nd61kRuR

Answer 1

The simplest / safest / quickest method is to stand up a new one for replacement.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2012, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Please run the DM log collector and post a share link into this thread using one drive, drop box, or google drive.

If the server is able to run the V2 log collector then it will collect more useful logs for troubleshooting.

https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

https://www.elevenforum.com/t/bsod-posting-instructions.103/

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post there is /\ with a number: click = a helpful post
.
.
.
.
.