Winlogon crashes daily on fresh Azure VM

Question

Winlogon crashes daily on fresh Azure VM

Semen Anikin 47

Hello, everyone. I have a strange thing with some Azure VMs. After the September 2024 update, 2 of 100 VMs have permanent issues with Winlogon service crashes. I googled the info about event ID 4005 but didn't find relevant information. Last weekend I deleted both affected VMs and manually created two new VMs with the same names from Azure official images. But the issue appeared again.

Please advise what logs to check to figure out the root of the case.

User's image

The information about the affected VM. It is a local Active Directory joined VM. It doesn't have any dedicated GPO.

User's image

Anonymous

2024-10-18T18:56:41.93+00:00

Hi Semen Anikin (Finstek),
Any Update on my previous response please let us know we will always help you
Anonymous

2024-10-21T17:11:44.8966667+00:00

Hi Semen Anikin (Finstek),
Just want to check is that issue resolved or else if you need any help, please let us know we will always help as you needed.! if you had chance please review once my previous comment.
Thank you.!

1 answer

Your answer

Anonymous

2024-10-18T18:56:41.93+00:00

Hi Semen Anikin (Finstek),
Any Update on my previous response please let us know we will always help you
Anonymous

2024-10-21T17:11:44.8966667+00:00

Hi Semen Anikin (Finstek),
Just want to check is that issue resolved or else if you need any help, please let us know we will always help as you needed.! if you had chance please review once my previous comment.
Thank you.!

Answer 1

Anonymous

Hi Semen Anikin (Finstek),
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
Based on your query, It might be issue with image but not sure as we cannot confirm. For all VM using same image are this two vm's are different just want to confirm and as you mentioned you It doesn't have any dedicated. Could you please check for any system-level errors in the Event Viewer? Based on the logs, we can determine where things may have gone wrong. if you have additional information, please share use better we can assist you more.!

Semen Anikin 47 Reputation points

2024-10-30T08:03:05.24+00:00

What should I check?
Anonymous

2024-10-30T17:42:14.77+00:00

Hi Semen Anikin (Finstek),
Thank for the response back,
In event viewer, there will be windows logs in that section drop down we have other sub names regarding logs as mentioned below image

Could you please check those things you find any related to that issue
and let us know
Semen Anikin 47 Reputation points

2024-11-11T03:26:54.53+00:00

There is no any issue related to Winlogon service.
Anonymous

2024-11-11T09:59:22.1533333+00:00

Hi Semen Anikin (Finstek),
Thank you for replying back to us
We are looking into it on this issue only and will get back to you soon.
Anonymous

2024-11-12T11:47:02.5566667+00:00

Hi Semen Anikin (Finstek),
Thank you for patience while reviewing your query
Regarding the Win logon service crashes on your Azure VMs. To help us identify the root cause of the problem, I recommend enabling Boot Diagnostics on the affected VMs and checking the serial console logs for any errors during startup.

Could you please give try last attempt below things
To do this, go to the Azure portal, select the affected VM, and under the Support + Troubleshooting section, click on Boot Diagnostics. If it’s not already enabled, turn it on and choose a storage account to store the diagnostic data. After enabling it, return to the VM’s page and check the Serial Console under Boot Diagnostics to see if there are any error messages during boot, such as issues with Winlogon or profile loading. If the serial console doesn’t show enough information, you can also check the Storage Account linked to the VM’s diagnostics data. In the storage account, look for logs or screenshots in the Boot Diagnostics container, which may provide more details about the startup issue.
Please refer below document for more information
How to use boot diagnostics to troubleshoot virtual machines in Azure

Enabling these diagnostics will help us better understand what’s going wrong during the boot process and identify any underlying problems causing the Winlogon crashes. Let me know if you need assistance with this, or feel free to share the logs once they’re available so we can continue troubleshooting.

After troubleshooting with the above steps, if you’re still unable to identify the exact issue, I would suggest raising a support ticket with Microsoft to investigate the environment further

Could you please tag us in comment if you need any other question, you have any other doubt, we will always help you as needed.!
Anonymous

2024-11-13T12:45:50.34+00:00

Hi Semen Anikin (Finstek),
Just reaching out to ask if there are any updates regarding my earlier comment. please let us know

Share via

Winlogon crashes daily on fresh Azure VM

1 answer

Your answer