Issue Summary
I have a newly configured Read-Only Domain Controller (RODC) running Windows Server 2019. Several Windows 11 Pro PCs are supposed to join the RODC. However, WhatsApp Desktop (Microsoft Store version) consistently crashes when launched by domain users on these PCs. The crash does not occur for:
- Local user accounts on the same PCs
- Domain-joined PCs pointing to a writable domain controller
Additionally, I have already allowed the necessary password replication on the RODC for the involved domain user and the Windows 11 PC account.
Environment Details
- RODC: Windows Server 2019
- Client PCs: Windows 11 Pro (fully updated)
- WhatsApp Desktop Version: 2.2502.3.0 (Store/UWP app)
- Active Directory: Single Forest, multiple DCs (including this new RODC)
Symptoms
When a domain user logs into a Windows 11 workstation (joined to the RODC) and attempts to launch WhatsApp Desktop, the app crashes after loading for a few seconds. No GUI error message is shown; it simply closes. Logging in with a local user on the same machine (or pointing the machine to a writeable DC) does not trigger the crash.
Event Viewer Logs
Below are two relevant log entries from the Event Viewer (Application Error and Windows Error Reporting):
1. Application Error
Faulting application name: WhatsApp.exe, version: 0.0.0.0, time stamp: 0x678970d2
Faulting module name: twinapi.appcore.dll, version: 10.0.26100.2454, time stamp: 0xf2c58052
Exception code: 0xc000027b
Fault offset: 0x0000000000074b43
Faulting process id: 0x1024
Faulting application start time: 0x1DB6D7F79AABF90
Faulting application path: C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe
Faulting module path: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
Report Id: 4c56128e-1f8d-4b11-ae44-cf76e5a3db80
Faulting package full name: 5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm
Faulting package-relative application ID: App
2. Windows Error Reporting
Fault bucket 1754233769781301191, type 5
Event Name: MoAppCrash
Response: Not available
Cab Id: 0
Problem signature:
P1: 5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm
P2: praid:App
P3: 0.0.0.0
P4: 678970d2
P5: combase.dll
P6: 10.0.26100.2894
P7: be3fbb33
P8: 80004005
P9: 00000000000cd9e4
P10:
Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.8f41ecac-085e-49af-b0c2-f85e46167782.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.27ad2f85-9d0a-4c44-956f-0e712fdf5c0a.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.b0b5d379-0cf3-4429-8692-4da93f38244f.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a3111108-b46b-4fa3-a44d-02b67acffa9f.tmp.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.c3066cb7-8a20-44c5-9189-997557600095.tmp.xml
These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_5319275A.WhatsAp_e44d9320fd30c69eda1e1ceab52f1ec83efb4f_a2281cf2_5ec12b16-196d-4ea8-9c91-726eb5cf1f93
Analysis symbol:
Rechecking for solution: 0
Report Id: 4c56128e-1f8d-4b11-ae44-cf76e5a3db80
Report Status: 268435456
Hashed bucket: 323d689eb919f49fe8584a51bccf0fc7
Cab Guid: 0
Error Dump Found in \?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_5319275A.WhatsAp_e44d9320fd30c69eda1e1ceab52f1ec83efb4f_a2281cf2_5ec12b16-196d-4ea8-9c91-726eb5cf1f93:
Version=1
EventType=MoAppCrash
EventTime=133821008239463795
ReportType=2
Consent=1
UploadTime=133821008246829620
ReportStatus=268435456
ReportIdentifier=5ec12b16-196d-4ea8-9c91-726eb5cf1f93
IntegratorReportIdentifier=4c56128e-1f8d-4b11-ae44-cf76e5a3db80
Wow64Host=34404
NsAppName=praid:App
AppSessionGuid=00001024-0001-002a-90bf-aa797f6ddb01
TargetAppId=U:5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm!App
TargetAppVer=2.2502.3.0_x64_!2025//01//16:20:49:22!0!WhatsApp.exe
BootId=4294967295
TargetAsId=497
UserImpactVector=808452880
IsFatal=1
EtwNonCollectReason=1
Response.BucketId=323d689eb919f49fe8584a51bccf0fc7
Response.BucketTable=5
Response.LegacyBucketId=1754233769781301191
Response.type=4
Sig[0].Name=Package Full Name
Sig[0].Value=5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm
Sig[1].Name=Application Name
Sig[1].Value=praid:App
Sig[2].Name=Application Version
Sig[2].Value=0.0.0.0
Sig[3].Name=Application Timestamp
Sig[3].Value=678970d2
Sig[4].Name=Fault Module Name
Sig[4].Value=combase.dll
Sig[5].Name=Fault Module Version
Sig[5].Value=10.0.26100.2894
Sig[6].Name=Fault Module Timestamp
Sig[6].Value=be3fbb33
Sig[7].Name=Exception Code
Sig[7].Value=80004005
Sig[8].Name=Exception Offset
Sig[8].Value=00000000000cd9e4
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.26100.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=3c02
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=3c022f78cd0e5952521019faf1a79fc4
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=1ab4
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=1ab43879cf3da2cbae383ab939830a1a
UI[2]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe
LoadedModule[0]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe
LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\WINDOWS\System32\KERNEL32.DLL
LoadedModule[3]=C:\WINDOWS\System32\KERNELBASE.dll
LoadedModule[4]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.dll
LoadedModule[5]=C:\WINDOWS\System32\ole32.dll
LoadedModule[6]=C:\WINDOWS\System32\msvcp_win.dll
LoadedModule[7]=C:\WINDOWS\System32\ucrtbase.dll
LoadedModule[8]=C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe\mrt100_app.dll
LoadedModule[9]=C:\WINDOWS\System32\GDI32.dll
LoadedModule[10]=C:\WINDOWS\System32\win32u.dll
LoadedModule[11]=C:\WINDOWS\System32\combase.dll
LoadedModule[12]=C:\WINDOWS\System32\gdi32full.dll
LoadedModule[13]=C:\WINDOWS\System32\RPCRT4.dll
LoadedModule[14]=C:\WINDOWS\System32\USER32.dll
LoadedModule[15]=C:\WINDOWS\System32\advapi32.dll
LoadedModule[16]=C:\WINDOWS\System32\msvcrt.dll
LoadedModule[17]=C:\WINDOWS\System32\sechost.dll
LoadedModule[18]=C:\WINDOWS\System32\OleAut32.dll
LoadedModule[19]=C:\WINDOWS\System32\Normaliz.dll
LoadedModule[20]=C:\WINDOWS\System32\crypt32.dll
LoadedModule[21]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll
LoadedModule[22]=C:\WINDOWS\System32\ws2_32.dll
LoadedModule[23]=C:\WINDOWS\SYSTEM32\BCrypt.dll
LoadedModule[24]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\clrcompression.dll
LoadedModule[25]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\e_sqlite3.dll
LoadedModule[26]=C:\WINDOWS\SYSTEM32\iphlpapi.dll
LoadedModule[27]=C:\WINDOWS\SYSTEM32\wintypes.dll
LoadedModule[28]=C:\WINDOWS\SYSTEM32\version.dll
LoadedModule[29]=C:\WINDOWS\SYSTEM32\sspicli.dll
LoadedModule[30]=C:\WINDOWS\SYSTEM32\ncrypt.dll
LoadedModule[31]=C:\WINDOWS\SYSTEM32\mrt100.dll
LoadedModule[32]=C:\WINDOWS\SYSTEM32\kernel.appcore.dll
LoadedModule[33]=C:\WINDOWS\System32\bcryptPrimitives.dll
LoadedModule[34]=C:\Windows\System32\rmclient.dll
LoadedModule[35]=C:\WINDOWS\System32\IMM32.DLL
LoadedModule[36]=C:\WINDOWS\SYSTEM32\NTASN1.dll
LoadedModule[37]=C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
LoadedModule[38]=C:\Windows\System32\Windows.UI.Xaml.dll
LoadedModule[39]=C:\WINDOWS\SYSTEM32\iertutil.dll
LoadedModule[40]=C:\WINDOWS\SYSTEM32\srvcli.dll
LoadedModule[41]=C:\WINDOWS\SYSTEM32\netutils.dll
LoadedModule[42]=C:\WINDOWS\System32\shcore.dll
LoadedModule[43]=C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
LoadedModule[44]=C:\Windows\System32\Windows.UI.dll
LoadedModule[45]=C:\WINDOWS\SYSTEM32\CoreMessaging.dll
LoadedModule[46]=C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
LoadedModule[47]=C:\WINDOWS\system32\uxtheme.dll
LoadedModule[48]=C:\WINDOWS\SYSTEM32\urlmon.dll
LoadedModule[49]=C:\WINDOWS\SYSTEM32\windows.storage.dll
LoadedModule[50]=C:\WINDOWS\SYSTEM32\dxgi.dll
LoadedModule[51]=C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll
LoadedModule[52]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsAppNative.dll
LoadedModule[53]=C:\WINDOWS\SYSTEM32\MFReadWrite.dll
LoadedModule[54]=C:\WINDOWS\SYSTEM32\MFPlat.DLL
LoadedModule[55]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vccorlib140_app.DLL
LoadedModule[56]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll
LoadedModule[57]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll
LoadedModule[58]=C:\WINDOWS\SYSTEM32\d2d1.dll
LoadedModule[59]=C:\WINDOWS\SYSTEM32\d3d11.dll
LoadedModule[60]=C:\WINDOWS\SYSTEM32\MMDevAPI.DLL
LoadedModule[61]=C:\WINDOWS\SYSTEM32\WINMM.dll
LoadedModule[62]=C:\WINDOWS\SYSTEM32\cfgmgr32.dll
LoadedModule[63]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\CONCRT140_APP.dll
LoadedModule[64]=C:\WINDOWS\SYSTEM32\RTWorkQ.DLL
LoadedModule[65]=C:\WINDOWS\SYSTEM32\dxcore.dll
LoadedModule[66]=C:\Windows\System32\Windows.Storage.ApplicationData.dll
LoadedModule[67]=C:\WINDOWS\SYSTEM32\PROPSYS.dll
LoadedModule[68]=C:\Windows\System32\Windows.System.Launcher.dll
LoadedModule[69]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igd10iumd64.dll
LoadedModule[70]=C:\WINDOWS\SYSTEM32\apphelp.dll
LoadedModule[71]=C:\WINDOWS\System32\shlwapi.dll
LoadedModule[72]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igd10um64gen11.DLL
LoadedModule[73]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igdgmm64.dll
LoadedModule[74]=C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll
LoadedModule[75]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igc64.dll
LoadedModule[76]=C:\WINDOWS\System32\SHELL32.dll
LoadedModule[77]=C:\WINDOWS\SYSTEM32\USERENV.dll
LoadedModule[78]=C:\Windows\System32\MrmCoreR.dll
LoadedModule[79]=C:\WINDOWS\SYSTEM32\profext.dll
LoadedModule[80]=C:\WINDOWS\SYSTEM32\profapi.dll
LoadedModule[81]=C:\Windows\System32\CryptoWinRT.dll
LoadedModule[82]=C:\WINDOWS\SYSTEM32\dwrite.dll
LoadedModule[83]=C:\WINDOWS\SYSTEM32\rometadata.dll
LoadedModule[84]=C:\Windows\System32\Windows.ApplicationModel.dll
LoadedModule[85]=C:\WINDOWS\SYSTEM32\TextShaping.dll
LoadedModule[86]=C:\WINDOWS\SYSTEM32\bcp47mrm.dll
LoadedModule[87]=C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2310.30001.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
LoadedModule[88]=C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll
LoadedModule[89]=C:\Windows\System32\Windows.System.Profile.SystemId.dll
LoadedModule[90]=C:\WINDOWS\SYSTEM32\CLIPC.dll
LoadedModule[91]=C:\WINDOWS\System32\msctf.dll
LoadedModule[92]=C:\Windows\System32\windowscodecs.dll
LoadedModule[93]=C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
LoadedModule[94]=C:\Windows\System32\threadpoolwinrt.dll
LoadedModule[95]=C:\WINDOWS\system32\execmodelproxy.dll
LoadedModule[96]=C:\WINDOWS\SYSTEM32\pfclient.dll
LoadedModule[97]=C:\WINDOWS\system32\CoreUIComponents.dll
LoadedModule[98]=C:\Windows\System32\InputHost.dll
LoadedModule[99]=C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
LoadedModule[100]=C:\Windows\System32\UiaManager.dll
LoadedModule[101]=C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll
LoadedModule[102]=C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll
LoadedModule[103]=C:\WINDOWS\SYSTEM32\TextInputFramework.dll
LoadedModule[104]=C:\Windows\System32\Windows.UI.Immersive.dll
LoadedModule[105]=C:\WINDOWS\system32\DataExchange.dll
LoadedModule[106]=C:\Windows\System32\Windows.Globalization.dll
LoadedModule[107]=C:\WINDOWS\SYSTEM32\Bcp47Langs.dll
LoadedModule[108]=C:\Windows\System32\Windows.Energy.dll
LoadedModule[109]=C:\Windows\System32\dcomp.dll
LoadedModule[110]=C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll
LoadedModule[111]=C:\Windows\System32\Windows.Graphics.dll
LoadedModule[112]=C:\WINDOWS\SYSTEM32\msftedit.dll
LoadedModule[113]=C:\WINDOWS\SYSTEM32\globinputhost.dll
LoadedModule[114]=C:\WINDOWS\System32\wpnapps.dll
LoadedModule[115]=C:\Windows\System32\Windows.UI.Xaml.Phone.dll
LoadedModule[116]=C:\WINDOWS\system32\directmanipulation.dll
LoadedModule[117]=C:\WINDOWS\system32\mskeyprotect.dll
LoadedModule[118]=C:\WINDOWS\SYSTEM32\DPAPI.DLL
LoadedModule[119]=C:\Windows\System32\Windows.System.Diagnostics.dll
LoadedModule[120]=C:\Windows\System32\Windows.Networking.Connectivity.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=26100
OsInfo[3].Key=ubr
OsInfo[3].Value=2894
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=48
OsInfo[9].Key=domain
OsInfo[9].Value=1
OsInfo[10].Key=prodsuite
OsInfo[10].Value=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=223032118
OsInfo[15].Key=osinsty
OsInfo[15].Value=1
OsInfo[16].Key=iever
OsInfo[16].Value=11.1882.26100.0-11.0.1000
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=8071
OsInfo[19].Key=svolsz
OsInfo[19].Value=237
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=240331
OsInfo[22].Key=bldtm
OsInfo[22].Value=1435
OsInfo[23].Key=bldbrch
OsInfo[23].Value=ge_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.26100.2894.amd64fre.ge_release.240331-1435
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=Professional
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=flightbranch
OsInfo[34].Key=expid
OsInfo[34].Value=MD:283BAEF,ME:3037091,ME:3038C64,FX:1335A3A6,ME:3038CEC,MD:3039059
OsInfo[35].Key=fconid
OsInfo[35].Value=19194309,0,2,0;23877894,1,2,0;35681102,0,1,0;39146010,0,2,0;42187503,0,1,0;42969627,0,1,1;43283184,0,1,0;44030954,0,1,0;45825686,0,1,0;46817969,0,2,1;47557358,0,2,1;48433541,0,2,0;48433706,0,2,0;48433719,0,1,0;48468527,0,2,0;48468541,0,2,0;48525682,0,1,1;49084341,0,1,0;49106743,0,2,0;49175271,0,2,0;49204591,0,1,0;49239926,0,1,0;49309588,0,1,0;49577493,0,1,0;49615603,0,1,0;49666144,0,1,0;49918560,0,1,0;50219409,0,1,0;50219413,0,1,0;50556886,0,2,0;50557073,0,2,0;50564196,0,2,1;50564332,0,2,0;50565209,0,1,0;50762615,0,1,0;50879031,0,1,1;51578581,0,1,0;51850502,2,2,0;52087985,0,1,0;52800232,0,1,1;53536518,0,1,0;54157537,0,1,1;54237951,0,1,0;54237969,0,1,0;54237977,0,1,0;54237988,0,1,0;54237993,0,1,0;54238000,0,1,0;55199570,0,1,0;55733275,0,2,0
OsInfo[36].Key=containerid
OsInfo[37].Key=containertype
OsInfo[38].Key=edu
OsInfo[38].Value=0
OsInfo[39].Key=servicinginprogress
OsInfo[39].Value=0
OsInfo[40].Key=featureupdatependingreboot
OsInfo[40].Value=0
FriendlyEventName=Stopped working
ConsentKey=MoAppCrash
AppName=WhatsApp.exe
AppPath=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=CE9D29DBD482937861A9A80789AA3A06
MetadataHash=-86070843
Troubleshooting Steps Taken
- Password Replication Policy: Confirmed domain user and PC are allowed on the RODC.
- SFC /scannow & DISM: No integrity violations found.
- Repair / Reset WhatsApp Desktop via Apps & Features: No change.
- Reinstall WhatsApp Desktop: No change.
- Test Different User Accounts:
- Local accounts on the same PC: Works fine
- Domain account on the same PC: Crashes if RODC is the DC
- Domain account on a writable DC: No crash
- Windows Updates: All up-to-date on both RODC and Windows 11 PCs.
Request for Help
- Has anyone encountered UWP app crashes (especially WhatsApp Desktop) only when logging onto an RODC?
- Are there known group policies, COM/DCOM permissions, or password replication quirks that might affect UWP apps?
- Any specific RODC configuration (beyond standard Password Replication Policy changes) that allows Store apps to function normally for domain users?
I appreciate any guidance or insight from those who have experienced similar issues. Thank you in advance for your help!