Hallo Zhou,
das Problem tritt Remote wie auch lokal auf. Der Domänenadministrator und lokale Administratoren kann sich auf den betroffenen Geräten anmelden.
Es wurden keine Einstellungen geändert oder Updates installiert. Was mir nur aufgefallen ist das auf allen betroffenen Geräte einen Dumpfile existiert:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Unknown bugcheck code (c0000244)
Unknown bugcheck description
Arguments:
Arg1: ffffffffc00002fe
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2390
Key : Analysis.Elapsed.mSec
Value: 3288
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 624
Key : Analysis.Init.Elapsed.mSec
Value: 8356
Key : Analysis.Memory.CommitPeak.Mb
Value: 95
Key : Bugcheck.Code.LegacyAPI
Value: 0xc0000244
Key : Dump.Attributes.AsUlong
Value: 1008
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: 0xc0000244\_nt!PopTransitionSystemPowerStateEx
Key : Failure.Hash
Value: {d7f4a2a5-f9d9-6b4b-d223-f30d1c443f4b}
BUGCHECK_CODE: c0000244
BUGCHECK_P1: ffffffffc00002fe
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
FILE_IN_CAB: 121123-5562-01.dmp
ERROR_CODE: (NTSTATUS) 0xc0000244 - { berwachung fehlgeschlagen} Ein Versuch zur Erzeugung einer Sicherheits berwachung ist fehlgeschlagen.
EXCEPTION_CODE_STR: c0000244
EXCEPTION_PARAMETER1: ffffffffc00002fe
EXCEPTION_PARAMETER2: 0000000000000000
EXCEPTION_PARAMETER3: 0000000000000000
EXCEPTION_PARAMETER4: 0
DUMP_FILE_ATTRIBUTES: 0x1008
Kernel Generated Triage Dump
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: lsass.exe
STACK_TEXT:
fffff609ca797398 fffff80168e9ed3e : 000000000000004c 00000000c0000244 fffff609c19b5398 ffffd30a83556520 : nt!KeBugCheckEx
fffff609ca7973a0 fffff80168ea80c5 : fffff609ca797558 fffff609ca797479 ffffffff80004004 0000000000000000 : nt!PopGracefulShutdown+0x2ce
fffff609ca797400 fffff80168ea482c : 0000000000000001 0000000000000000 0000000000000000 0000000000000000 : nt!PopTransitionSystemPowerStateEx+0x1045
fffff609ca7974e0 fffff8016882b8e8 : fffff80168411b38 fffff609ca797739 fffff8016910e240 fffff8016881c370 : nt!NtSetSystemPowerState+0x4c
fffff609ca7976b0 fffff8016881c370 : fffff80168d87d77 0000000000000014 00000000ffffff00 0000000000000000 : nt!KiSystemServiceCopyEnd+0x28
fffff609ca797848 fffff80168d87d77 : 0000000000000014 00000000ffffff00 0000000000000000 ffffffffffffffff : nt!KiServiceLinkage
fffff609ca797850 fffff80168d88060 : 0000000000000000 ffffd30a64ab5cf0 ffffd30a8df02080 fffff8016863554f : nt!PopIssueActionRequest+0x223
fffff609ca797900 fffff801687608e8 : ffffd30a8df02000 0000000000000002 00000000ffffffff fffff8016914aac0 : nt!PopPolicyWorkerAction+0x80
fffff609ca797980 fffff80168634f85 : ffffd30a00000001 ffffd30a8df02080 fffff609ca797ac0 ffffd30a64ab5cf0 : nt!PopPolicyWorkerThread+0xa8
fffff609ca7979c0 fffff80168707167 : ffffd30a8df02080 000000000000010a ffffd30a8df02080 fffff80168634e30 : nt!ExpWorkerThread+0x155
fffff609ca797bb0 fffff8016881ba44 : ffff85808c680180 ffffd30a8df02080 fffff80168707110 0000000000000246 : nt!PspSystemThreadStartup+0x57
fffff609ca797c00 0000000000000000 : fffff609ca798000 fffff609ca791000 0000000000000000 0000000000000000 : nt!KiStartSystemThread+0x34
SYMBOL_NAME: nt!PopTransitionSystemPowerStateEx+1045
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.22621.2792
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 1045
FAILURE_BUCKET_ID: 0xc0000244_nt!PopTransitionSystemPowerStateEx
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {d7f4a2a5-f9d9-6b4b-d223-f30d1c443f4b}
Followup: MachineOwner
Danke!