Winlogon crashes daily on fresh Azure VM

Semen Anikin (Finstek) 47 Reputation points
2024-10-17T08:03:50.67+00:00

Hello, everyone. I have a strange thing with some Azure VMs. After the September 2024 update, 2 of 100 VMs have permanent issues with Winlogon service crashes. I googled the info about event ID 4005 but didn't find relevant information. Last weekend I deleted both affected VMs and manually created two new VMs with the same names from Azure official images. But the issue appeared again.

Please advise what logs to check to figure out the root of the case.

User's image

The information about the affected VM. It is a local Active Directory joined VM. It doesn't have any dedicated GPO.

User's image

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,972 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,198 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Akshay kumar Mandha 1,040 Reputation points Microsoft Vendor
    2024-10-17T21:12:33.79+00:00

    Hi Semen Anikin (Finstek),
    Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
    Based on your query, It might be issue with image but not sure as we cannot confirm. For all VM using same image are this two vm's are different just want to confirm and as you mentioned you It doesn't have any dedicated. Could you please check for any system-level errors in the Event Viewer? Based on the logs, we can determine where things may have gone wrong. if you have additional information, please share use better we can assist you more.!


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.