Resolved: Individual efforts by central and campus IT service and support teams will continue to remediate remaining issues across the university.

The initial estimate of 5000 impacted desktops was down to 230 managed and unmanaged systems as of noon ET, Thursday, August 1, 2024.

The CIT Endpoint Infrastructure and Engineering tool has been deployed. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources and the back story follow.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

There are zero reported down systems or Windows PC Zoom rooms at this time.

If you are aware of a down system or Windows PC Zoom room, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

Resolved: Individual efforts by central and campus IT service and support teams will continue to remediate remaining issues across the university. 

Update: The initial estimate of 5000 impacted desktops is down to 230 managed and unmanaged systems as of noon ET, Thursday, August 1, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources and the back story follow.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

There are zero reported down systems or Windows PC Zoom rooms at this time.

If you are aware of a down system or Windows PC Zoom room, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: The initial estimate of 5000 impacted desktops is down to 310 managed and unmanaged systems as of 10:30am ET, Tuesday, Jul 30, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources and the back story follow.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

There are zero reported down systems or Windows PC Zoom rooms at this time.

If you are aware of a down system or Windows PC Zoom room, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: The initial estimate of 5000 impacted desktops is down to 332 managed and unmanaged systems as of 10:30am ET, Monday, July 29, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources and the back story follow.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

There are zero reported down systems or Windows PC Zoom rooms at this time.

If you are aware of a down system or Windows PC Zoom room, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 374 managed and unmanaged systems as of 3:0pmam ET, Friday, July 26, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources and the back story follow.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

There are zero reported down systems or Windows PC Zoom rooms at this time.

If you are aware of a down system or Windows PC Zoom room, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 428 managed and unmanaged systems as of 9:00am ET, Thursday, July 25, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources and the back story follow.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

There are zero reported down systems or Windows PC Zoom rooms at this time.

If you are aware of a down system or Windows PC Zoom room, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 524 managed and unmanaged systems as of 8:30am ET, Wednesday, July 24, 2024. Of those devices, 100 are remote and the remainder on campus. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed and is being tested. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Windows PC Zoom rooms down as of 12:00pm ET on Wednesday, July 24, 2024:

If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 524 managed and unmanaged systems as of 8:30am ET, Wednesday, July 24, 2024. Of those devices, 100 are remote and the remainder on campus. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed and is being tested. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

CrowdStrike has provided an explanation for what went wrong.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Windows PC Zoom rooms down as of 10:00am ET on Tuesday, July 23, 2024:

If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 537 managed and unmanaged systems as of 4:00pm ET, Tuesday, July 23, 2024. Of those devices, 130 are remote and the remainder on campus. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed and is being tested. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Windows PC Zoom rooms down as of 10:00am ET on Tuesday, July 23, 2024:

If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 731 managed and unmanaged systems as of 9:30am ET, Tuesday, July 23, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed and is being tested. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Windows PC Zoom rooms down as of 10:00am ET on Tuesday, July 23, 2024:

If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 731 managed and unmanaged systems as of 9:30am ET, Tuesday, July 23, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed and is being tested. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Windows PC Zoom rooms down as of 10:00am ET on Tuesday, July 23, 2024:

If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 731 managed and unmanaged systems as of 4pm ET, Monday, July 22, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

The CIT Endpoint Infrastructure and Engineering tool has been deployed and is being tested. IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

No services down as of 8:30am ET on Monday, July 22, 2024. As of 4pm ET on Monday, there were still no services down. If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Windows PC Zoom rooms down as of 8:30am ET on Monday, July 22, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 786 managed and unmanaged systems as of 4pm ET, Monday, July 22, 2024. IT teams continue to triage and resolve as problem tickets are submitted.

IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

No services down as of 8:30am ET on Monday, July 22, 2024. As of 4pm ET on Monday, there were still no services down. If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Windows PC Zoom rooms down as of 8:30am ET on Monday, July 22, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 1109 managed and unmanaged systems. IT teams continue to triage and resolve as problem tickets are submitted.

IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

No services down as of 8:30am ET on Monday, July 22, 2024. If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Windows PC Zoom rooms down as of 8:30am ET on Monday, July 22, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 1109 managed and unmanaged systems. IT teams continue to triage and resolve as problem tickets are submitted.

IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

No services down as of 8:30am ET on Monday, July 22, 2024. If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Windows PC Zoom rooms down as of 8:30am ET on Monday, July 22, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT is monitoring the status of a few Distributed Servers; no major issues have been reported by their owners. The initial estimate of 5000 impacted desktops is down to 1367 managed and unmanaged systems. IT teams continue to triage and resolve as problem tickets are submitted.

IT staff are ready to help during regular business hours when you contact the IT Service Desk.

Resources are listed next, followed by a list of down Zoom rooms, then details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

No services down as of 8:30am ET on Monday, July 22, 2024. If you are aware of a down system, please contact the IT Service Desk: https://it.cornell.edu/support 

Windows PC Zoom rooms down as of 8:30am ET on Monday, July 22, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT continues working remaining issues. Previously, many Windows computers reached a blue screen error when started, part of a widespread technology issue. IT staff are ready to help during regular business hours. If  your situation does not enable you to wait for business hours, please indicate that in your request when you contact the IT Service Desk.

We will monitor over the weekend but no alerts on this incident will posted unless there is an emergency.

Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 5:30pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support 

Zoom rooms down as of 5:30pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen

Update: Windows Managed Servers & many Zoom rooms are back online. CIT continues working remaining issues. Previously, many Windows computers reached a blue screen error when started, part of a widespread technology issue. IT staff are ready to help during regular business hours. If  your situation does not enable you to wait for business hours, please indicate that in your request when you contact the IT Service Desk.

We will monitor over the weekend but no alerts on this incident will posted unless there is an emergency.

Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 5:30pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support 

Zoom rooms down as of 5:30pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen   

Update: Windows Managed Servers & many Zoom rooms are back online. CIT continues working remaining issues. Previously, many Windows computers reached a blue screen error when started, part of a widespread technology issue. IT staff are ready to help during regular business hours. If  your situation does not enable you to wait for business hours, please indicate that in your request when you contact the IT Service Desk.

We will monitor over the weekend but no alerts on this incident will posted unless there is an emergency.

Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 5:30pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support 

Zoom rooms down as of 5:30pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen   

Update: Windows Managed Servers & many Zoom rooms are back online. CIT continues working remaining issues. Previously, many Windows computers reached a blue screen error when started, part of a widespread technology issue. IT staff are ready to help during regular business hours. If  your situation does not enable you to wait for business hours, please indicate that in your request when you contact the IT Service Desk.

We will monitor over the weekend but no alerts on this incident will posted unless there is an emergency.

Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 5:30pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support 

Zoom rooms down as of 5:30pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen   

Update: Windows Managed Servers have been restored, more Zoom rooms are back online and CIT continues working remaining issues. Previously reported problem: Many Windows computers are reaching a blue screen error when started, part of a widespread technology issue. Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 2pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support 

Zoom rooms down as of 2pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen   

Update: Windows Managed Servers have been restored, more Zoom rooms are back online and CIT continues working remaining issues. Previously reported problem: Many Windows computers are reaching a blue screen error when started, part of a widespread technology issue. Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 2pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support .

Zoom rooms down as of 2pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen   

Update: Windows Managed Servers have been restored, more Zoom rooms are back online and CIT continues working remaining issues. Previously reported problem: Many Windows computers are reaching a blue screen error when started, part of a widespread technology issue. Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 2pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support .

Zoom rooms down as of 2pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen 

Update: Windows Managed Servers have been restored, more Zoom rooms are back online and CIT continues working remaining issues. Previously reported problem: Many Windows computers are reaching a blue screen error when started, part of a widespread technology issue. Resources are listed next, followed by a list of down systems, a list of down Zoom rooms, then  details of the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Services down as of 2pm ET on Friday, July 19, 2024:

IF you are aware of a down system NOT on this list, please contact the IT Service Desk: https://it.cornell.edu/support .

Zoom rooms down as of 2pm ET on Friday, July 19, 2024:

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error; this workaround requires administrative access: https://it.cornell.edu/endpoint-mgmt/crowdstrike-bluescreen 

Update: Windows Managed Servers have been restored, CIT continues working remaining issues. University messaging about the global issue was distributed. Problem: Many Windows computers are reaching a blue screen error when started. Resources are listed next, followed by the back story.

Resources:

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, contact your local technical support provider. If you do not know who this is, contact the IT Service Desk.
 

 

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error.

Update: Windows Managed Servers have been restored, CIT continues working remaining issues. University messaging about the global issue was distributed. Problem: Many Windows computers are reaching a blue screen error when started. Resources are listed next, followed by the back story.

Resources:
To join IT conversations on Zoom about the impact and progress we're making in recovering from this global outage: 

Web pages we are using to document fixes and track systems that are down. NOTE: for individual desktops, administrative access is required to use the fix instructions.

Back story:
This is part of a large-scale technology incident, primarily affecting Microsoft Windows machines. This issue is part of a global outage caused by a problematic update from one of the nation’s largest anti-virus software providers, CrowdStrike.

Overnight, the vendor stopped deployment of the update, corrected the problematic code, and started sending a new patch. Our IT teams have successfully recovered many critical systems, including those enabling single sign-on and multi-factor authentication. Major systems like Epic, Canvas, email, and SAP are functioning, however, we are still finding some affected systems. The workaround on servers is imperfect and will need additional work to fully correct once we have better information from the vendors.

For impacted customers, the error message begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, contact your local technical support provider. If you do not know who this is, contact the IT Service Desk.
 

 

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error.

Update: We have an all-clear on Windows Managed Servers. Many Windows computers are unavailable. A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, contact your local technical support provider. If you do not know who this is, contact the IT Service Desk. Your support provider can follow the instructions at Fix a Windows Computer That has a Blue Screen Error Due to CrowdStrike Update.
 

 

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error.

Update: We have an all-clear on Windows Managed Servers. Many Windows computers are unavailable. A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, contact your local technical support provider. If you do not know who this is, contact the IT Service Desk. Your support provider can follow the instructions at Fix a Windows Computer That has a Blue Screen Error Due to CrowdStrike Update.
 

 

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error.

Many Windows computers are unavailable. A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, contact your local technical support provider. If you do not know who this is, contact the IT Service Desk. Your support provider can follow the instructions at Fix a Windows Computer That has a Blue Screen Error Due to CrowdStrike Update.
 

 

 CIT staff are working on the issue. A workaround for technical support providers is available for individual computers encountering a blue screen error.

Many CIT-hosted Windows servers are unavailable, which is affecting services dependent on those servers and individual computers that are centrally managed.

A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. This includes centrally managed Cornell computers. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, the following steps should fix the problem. Contact your technical support if you need assistance with the process.
 
Restart the computer. If it crashes again, then:
1. Boot Windows into Safe Mode or the Windows Recovery Environment
2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching “C-00000291*.sys”, and delete it. 
4. Restart the computer normally.


 

 CIT staff are working on the issue. A workaround is available for individual computers encountering a blue screen error.

Many CIT-hosted Windows servers are unavailable, which is affecting services dependent on those servers and individual computers that are centrally managed.

A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. This includes centrally managed Cornell computers. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, the following steps should fix the problem. Contact your technical support if you need assistance with the process.
 
Restart the computer. If it crashes again, then:
1. Boot Windows into Safe Mode or the Windows Recovery Environment
2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching “C-00000291*.sys”, and delete it. 
4. Restart the computer normally.


 

 CIT staff are investigating.

Many CIT-hosted Windows servers are unavailable, which is affecting services dependent on those servers. These include individual computers that are centrally managed.

A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. This includes centrally managed Cornell computers. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, the following steps should fix the problem. Contact your technical support if you need assistance with the process.
 
Restart the computer. If it crashes again, then:
1. Boot Windows into Safe Mode or the Windows Recovery Environment
2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching “C-00000291*.sys”, and delete it. 
4. Restart the computer normally.


 

 CIT staff are investigating.

Many CIT-hosted Windows servers are unavailable, which is affecting services dependent on those servers. These include authentication servers and potentially endpoints (individual computers that are centrally managed).

A problem with an update distributed by CrowdStrike is causing Windows computers that received the update to not start up properly. This includes centrally managed Cornell computers. Instead, they are showing a blue screen with an error message that begins, "Your PC ran into a problem and needs to restart." Computers that were not turned on when the update was delivered have not been affected, because CrowdStrike has stopped distributing that update.

If a computer is in this blue screen mode, the following steps should fix the problem. Contact your technical support if you need assistance with the process.
 
Restart the computer. If it crashes again, then:
1. Boot Windows into Safe Mode or the Windows Recovery Environment
2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
3. Locate the file matching “C-00000291*.sys”, and delete it. 
4. Restart the computer normally.


 

 CIT staff are investigating.

Many CIT-hosted Windows servers are unavailable, which is affecting services dependent on those servers. These include authentication servers and potentially endpoints (individual computers that are centrally managed).  CIT staff are investigating.

 CIT staff are investigating.