I've been banging my heag against a wall here.
So have this strange issue that started a few days ago. Where random computers in our computer labs start blue screening with the error
What failed: Ntfs.sys
System is configured to access a Citrix Virtual Desktop.
Windows 10 x64 LTSC
Citrix WEM with transformer configuration version 2012.1
Windows Enpoint security configured through SCCM
Dell Optiplex 3060
BIOS ver 1.9.1
latest drivers running since January 2021 (A12 driver pack)
I've been through the dump file and here is the output
An attempt was made to write to readonly memory. The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arg1: fffff8064d2c8eaa, Virtual address for the attempted write.
Arg2: 0900000139eb5021, PTE contents.
Arg3: ffff9a82b241d370, (reserved)
Arg4: 000000000000000b, (reserved)
STACK_COMMAND: .trap 0xffff9a82b241d370 ; kb
OSNAME: Windows 10
From my initial investigation it points to Windows Defender.
if I check the event log is mentions a failed update for defender. If i repair by installing the missing update the issue persist.. I done windows updates, check for driver updates, hardware diagnostic, memory check all clear.
Anyone else had this issue?