Share via

WhatsApp Desktop Crashes on Windows 11 Pro When Joined to RODC (Server 2019)

Anonymous
Jan 23, 2025, 10:42 AM

Issue Summary

I have a newly configured Read-Only Domain Controller (RODC) running Windows Server 2019. Several Windows 11 Pro PCs are supposed to join the RODC. However, WhatsApp Desktop (Microsoft Store version) consistently crashes when launched by domain users on these PCs. The crash does not occur for:

  • Local user accounts on the same PCs
  • Domain-joined PCs pointing to a writable domain controller

Additionally, I have already allowed the necessary password replication on the RODC for the involved domain user and the Windows 11 PC account.

Environment Details

  • RODC: Windows Server 2019
  • Client PCs: Windows 11 Pro (fully updated)
  • WhatsApp Desktop Version: 2.2502.3.0 (Store/UWP app)
  • Active Directory: Single Forest, multiple DCs (including this new RODC)

Symptoms

When a domain user logs into a Windows 11 workstation (joined to the RODC) and attempts to launch WhatsApp Desktop, the app crashes after loading for a few seconds. No GUI error message is shown; it simply closes. Logging in with a local user on the same machine (or pointing the machine to a writeable DC) does not trigger the crash.

Event Viewer Logs

Below are two relevant log entries from the Event Viewer (Application Error and Windows Error Reporting): 1. Application Error

Faulting application name: WhatsApp.exe, version: 0.0.0.0, time stamp: 0x678970d2
Faulting module name: twinapi.appcore.dll, version: 10.0.26100.2454, time stamp: 0xf2c58052
Exception code: 0xc000027b
Fault offset: 0x0000000000074b43
Faulting process id: 0x1024
Faulting application start time: 0x1DB6D7F79AABF90
Faulting application path: C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe
Faulting module path: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
Report Id: 4c56128e-1f8d-4b11-ae44-cf76e5a3db80
Faulting package full name: 5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm
Faulting package-relative application ID: App

2. Windows Error Reporting

Fault bucket 1754233769781301191, type 5
Event Name: MoAppCrash
Response: Not available
Cab Id: 0

Problem signature:
P1: 5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm
P2: praid:App
P3: 0.0.0.0
P4: 678970d2
P5: combase.dll
P6: 10.0.26100.2894
P7: be3fbb33
P8: 80004005
P9: 00000000000cd9e4
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.8f41ecac-085e-49af-b0c2-f85e46167782.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.27ad2f85-9d0a-4c44-956f-0e712fdf5c0a.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.b0b5d379-0cf3-4429-8692-4da93f38244f.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.a3111108-b46b-4fa3-a44d-02b67acffa9f.tmp.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.c3066cb7-8a20-44c5-9189-997557600095.tmp.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_5319275A.WhatsAp_e44d9320fd30c69eda1e1ceab52f1ec83efb4f_a2281cf2_5ec12b16-196d-4ea8-9c91-726eb5cf1f93

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4c56128e-1f8d-4b11-ae44-cf76e5a3db80
Report Status: 268435456
Hashed bucket: 323d689eb919f49fe8584a51bccf0fc7
Cab Guid: 0

Error Dump Found in \?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_5319275A.WhatsAp_e44d9320fd30c69eda1e1ceab52f1ec83efb4f_a2281cf2_5ec12b16-196d-4ea8-9c91-726eb5cf1f93:

Version=1

EventType=MoAppCrash 

EventTime=133821008239463795 

ReportType=2 

Consent=1 

UploadTime=133821008246829620 

ReportStatus=268435456 

ReportIdentifier=5ec12b16-196d-4ea8-9c91-726eb5cf1f93 

IntegratorReportIdentifier=4c56128e-1f8d-4b11-ae44-cf76e5a3db80 

Wow64Host=34404 

NsAppName=praid:App 

AppSessionGuid=00001024-0001-002a-90bf-aa797f6ddb01 

TargetAppId=U:5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm!App 

TargetAppVer=2.2502.3.0_x64_!2025//01//16:20:49:22!0!WhatsApp.exe 

BootId=4294967295 

TargetAsId=497 

UserImpactVector=808452880 

IsFatal=1 

EtwNonCollectReason=1 

Response.BucketId=323d689eb919f49fe8584a51bccf0fc7 

Response.BucketTable=5 

Response.LegacyBucketId=1754233769781301191 

Response.type=4 

Sig[0].Name=Package Full Name 

Sig[0].Value=5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm 

Sig[1].Name=Application Name 

Sig[1].Value=praid:App 

Sig[2].Name=Application Version 

Sig[2].Value=0.0.0.0 

Sig[3].Name=Application Timestamp 

Sig[3].Value=678970d2 

Sig[4].Name=Fault Module Name 

Sig[4].Value=combase.dll 

Sig[5].Name=Fault Module Version 

Sig[5].Value=10.0.26100.2894 

Sig[6].Name=Fault Module Timestamp 

Sig[6].Value=be3fbb33 

Sig[7].Name=Exception Code 

Sig[7].Value=80004005 

Sig[8].Name=Exception Offset 

Sig[8].Value=00000000000cd9e4 

DynamicSig[1].Name=OS Version 

DynamicSig[1].Value=10.0.26100.2.0.0.256.48 

DynamicSig[2].Name=Locale ID 

DynamicSig[2].Value=1033 

DynamicSig[22].Name=Additional Information 1 

DynamicSig[22].Value=3c02 

DynamicSig[23].Name=Additional Information 2 

DynamicSig[23].Value=3c022f78cd0e5952521019faf1a79fc4 

DynamicSig[24].Name=Additional Information 3 

DynamicSig[24].Value=1ab4 

DynamicSig[25].Name=Additional Information 4 

DynamicSig[25].Value=1ab43879cf3da2cbae383ab939830a1a 

UI[2]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe 

LoadedModule[0]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe 

LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll 

LoadedModule[2]=C:\WINDOWS\System32\KERNEL32.DLL 

LoadedModule[3]=C:\WINDOWS\System32\KERNELBASE.dll 

LoadedModule[4]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.dll 

LoadedModule[5]=C:\WINDOWS\System32\ole32.dll 

LoadedModule[6]=C:\WINDOWS\System32\msvcp_win.dll 

LoadedModule[7]=C:\WINDOWS\System32\ucrtbase.dll 

LoadedModule[8]=C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe\mrt100_app.dll 

LoadedModule[9]=C:\WINDOWS\System32\GDI32.dll 

LoadedModule[10]=C:\WINDOWS\System32\win32u.dll 

LoadedModule[11]=C:\WINDOWS\System32\combase.dll 

LoadedModule[12]=C:\WINDOWS\System32\gdi32full.dll 

LoadedModule[13]=C:\WINDOWS\System32\RPCRT4.dll 

LoadedModule[14]=C:\WINDOWS\System32\USER32.dll 

LoadedModule[15]=C:\WINDOWS\System32\advapi32.dll 

LoadedModule[16]=C:\WINDOWS\System32\msvcrt.dll 

LoadedModule[17]=C:\WINDOWS\System32\sechost.dll 

LoadedModule[18]=C:\WINDOWS\System32\OleAut32.dll 

LoadedModule[19]=C:\WINDOWS\System32\Normaliz.dll 

LoadedModule[20]=C:\WINDOWS\System32\crypt32.dll 

LoadedModule[21]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll 

LoadedModule[22]=C:\WINDOWS\System32\ws2_32.dll 

LoadedModule[23]=C:\WINDOWS\SYSTEM32\BCrypt.dll 

LoadedModule[24]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\clrcompression.dll 

LoadedModule[25]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\e_sqlite3.dll 

LoadedModule[26]=C:\WINDOWS\SYSTEM32\iphlpapi.dll 

LoadedModule[27]=C:\WINDOWS\SYSTEM32\wintypes.dll 

LoadedModule[28]=C:\WINDOWS\SYSTEM32\version.dll 

LoadedModule[29]=C:\WINDOWS\SYSTEM32\sspicli.dll 

LoadedModule[30]=C:\WINDOWS\SYSTEM32\ncrypt.dll 

LoadedModule[31]=C:\WINDOWS\SYSTEM32\mrt100.dll 

LoadedModule[32]=C:\WINDOWS\SYSTEM32\kernel.appcore.dll 

LoadedModule[33]=C:\WINDOWS\System32\bcryptPrimitives.dll 

LoadedModule[34]=C:\Windows\System32\rmclient.dll 

LoadedModule[35]=C:\WINDOWS\System32\IMM32.DLL 

LoadedModule[36]=C:\WINDOWS\SYSTEM32\NTASN1.dll 

LoadedModule[37]=C:\WINDOWS\SYSTEM32\twinapi.appcore.dll 

LoadedModule[38]=C:\Windows\System32\Windows.UI.Xaml.dll 

LoadedModule[39]=C:\WINDOWS\SYSTEM32\iertutil.dll 

LoadedModule[40]=C:\WINDOWS\SYSTEM32\srvcli.dll 

LoadedModule[41]=C:\WINDOWS\SYSTEM32\netutils.dll 

LoadedModule[42]=C:\WINDOWS\System32\shcore.dll 

LoadedModule[43]=C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll 

LoadedModule[44]=C:\Windows\System32\Windows.UI.dll 

LoadedModule[45]=C:\WINDOWS\SYSTEM32\CoreMessaging.dll 

LoadedModule[46]=C:\Windows\System32\OneCoreUAPCommonProxyStub.dll 

LoadedModule[47]=C:\WINDOWS\system32\uxtheme.dll 

LoadedModule[48]=C:\WINDOWS\SYSTEM32\urlmon.dll 

LoadedModule[49]=C:\WINDOWS\SYSTEM32\windows.storage.dll 

LoadedModule[50]=C:\WINDOWS\SYSTEM32\dxgi.dll 

LoadedModule[51]=C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll 

LoadedModule[52]=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsAppNative.dll 

LoadedModule[53]=C:\WINDOWS\SYSTEM32\MFReadWrite.dll 

LoadedModule[54]=C:\WINDOWS\SYSTEM32\MFPlat.DLL 

LoadedModule[55]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vccorlib140_app.DLL 

LoadedModule[56]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll 

LoadedModule[57]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll 

LoadedModule[58]=C:\WINDOWS\SYSTEM32\d2d1.dll 

LoadedModule[59]=C:\WINDOWS\SYSTEM32\d3d11.dll 

LoadedModule[60]=C:\WINDOWS\SYSTEM32\MMDevAPI.DLL 

LoadedModule[61]=C:\WINDOWS\SYSTEM32\WINMM.dll 

LoadedModule[62]=C:\WINDOWS\SYSTEM32\cfgmgr32.dll 

LoadedModule[63]=C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\CONCRT140_APP.dll 

LoadedModule[64]=C:\WINDOWS\SYSTEM32\RTWorkQ.DLL 

LoadedModule[65]=C:\WINDOWS\SYSTEM32\dxcore.dll 

LoadedModule[66]=C:\Windows\System32\Windows.Storage.ApplicationData.dll 

LoadedModule[67]=C:\WINDOWS\SYSTEM32\PROPSYS.dll 

LoadedModule[68]=C:\Windows\System32\Windows.System.Launcher.dll 

LoadedModule[69]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igd10iumd64.dll 

LoadedModule[70]=C:\WINDOWS\SYSTEM32\apphelp.dll 

LoadedModule[71]=C:\WINDOWS\System32\shlwapi.dll 

LoadedModule[72]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igd10um64gen11.DLL 

LoadedModule[73]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igdgmm64.dll 

LoadedModule[74]=C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll 

LoadedModule[75]=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igc64.dll 

LoadedModule[76]=C:\WINDOWS\System32\SHELL32.dll 

LoadedModule[77]=C:\WINDOWS\SYSTEM32\USERENV.dll 

LoadedModule[78]=C:\Windows\System32\MrmCoreR.dll 

LoadedModule[79]=C:\WINDOWS\SYSTEM32\profext.dll 

LoadedModule[80]=C:\WINDOWS\SYSTEM32\profapi.dll 

LoadedModule[81]=C:\Windows\System32\CryptoWinRT.dll 

LoadedModule[82]=C:\WINDOWS\SYSTEM32\dwrite.dll 

LoadedModule[83]=C:\WINDOWS\SYSTEM32\rometadata.dll 

LoadedModule[84]=C:\Windows\System32\Windows.ApplicationModel.dll 

LoadedModule[85]=C:\WINDOWS\SYSTEM32\TextShaping.dll 

LoadedModule[86]=C:\WINDOWS\SYSTEM32\bcp47mrm.dll 

LoadedModule[87]=C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2310.30001.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 

LoadedModule[88]=C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll 

LoadedModule[89]=C:\Windows\System32\Windows.System.Profile.SystemId.dll 

LoadedModule[90]=C:\WINDOWS\SYSTEM32\CLIPC.dll 

LoadedModule[91]=C:\WINDOWS\System32\msctf.dll 

LoadedModule[92]=C:\Windows\System32\windowscodecs.dll 

LoadedModule[93]=C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll 

LoadedModule[94]=C:\Windows\System32\threadpoolwinrt.dll 

LoadedModule[95]=C:\WINDOWS\system32\execmodelproxy.dll 

LoadedModule[96]=C:\WINDOWS\SYSTEM32\pfclient.dll 

LoadedModule[97]=C:\WINDOWS\system32\CoreUIComponents.dll 

LoadedModule[98]=C:\Windows\System32\InputHost.dll 

LoadedModule[99]=C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL 

LoadedModule[100]=C:\Windows\System32\UiaManager.dll 

LoadedModule[101]=C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll 

LoadedModule[102]=C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll 

LoadedModule[103]=C:\WINDOWS\SYSTEM32\TextInputFramework.dll 

LoadedModule[104]=C:\Windows\System32\Windows.UI.Immersive.dll 

LoadedModule[105]=C:\WINDOWS\system32\DataExchange.dll 

LoadedModule[106]=C:\Windows\System32\Windows.Globalization.dll 

LoadedModule[107]=C:\WINDOWS\SYSTEM32\Bcp47Langs.dll 

LoadedModule[108]=C:\Windows\System32\Windows.Energy.dll 

LoadedModule[109]=C:\Windows\System32\dcomp.dll 

LoadedModule[110]=C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll 

LoadedModule[111]=C:\Windows\System32\Windows.Graphics.dll 

LoadedModule[112]=C:\WINDOWS\SYSTEM32\msftedit.dll 

LoadedModule[113]=C:\WINDOWS\SYSTEM32\globinputhost.dll 

LoadedModule[114]=C:\WINDOWS\System32\wpnapps.dll 

LoadedModule[115]=C:\Windows\System32\Windows.UI.Xaml.Phone.dll 

LoadedModule[116]=C:\WINDOWS\system32\directmanipulation.dll 

LoadedModule[117]=C:\WINDOWS\system32\mskeyprotect.dll 

LoadedModule[118]=C:\WINDOWS\SYSTEM32\DPAPI.DLL 

LoadedModule[119]=C:\Windows\System32\Windows.System.Diagnostics.dll 

LoadedModule[120]=C:\Windows\System32\Windows.Networking.Connectivity.dll 

State[0].Key=Transport.DoneStage1 

State[0].Value=1 

OsInfo[0].Key=vermaj 

OsInfo[0].Value=10 

OsInfo[1].Key=vermin 

OsInfo[1].Value=0 

OsInfo[2].Key=verbld 

OsInfo[2].Value=26100 

OsInfo[3].Key=ubr 

OsInfo[3].Value=2894 

OsInfo[4].Key=versp 

OsInfo[4].Value=0 

OsInfo[5].Key=arch 

OsInfo[5].Value=9 

OsInfo[6].Key=lcid 

OsInfo[6].Value=1033 

OsInfo[7].Key=geoid 

OsInfo[7].Value=244 

OsInfo[8].Key=sku 

OsInfo[8].Value=48 

OsInfo[9].Key=domain 

OsInfo[9].Value=1 

OsInfo[10].Key=prodsuite 

OsInfo[10].Value=256 

OsInfo[11].Key=ntprodtype 

OsInfo[11].Value=1 

OsInfo[12].Key=platid 

OsInfo[12].Value=10 

OsInfo[13].Key=sr 

OsInfo[13].Value=0 

OsInfo[14].Key=tmsi 

OsInfo[14].Value=223032118 

OsInfo[15].Key=osinsty 

OsInfo[15].Value=1 

OsInfo[16].Key=iever 

OsInfo[16].Value=11.1882.26100.0-11.0.1000 

OsInfo[17].Key=portos 

OsInfo[17].Value=0 

OsInfo[18].Key=ram 

OsInfo[18].Value=8071 

OsInfo[19].Key=svolsz 

OsInfo[19].Value=237 

OsInfo[20].Key=wimbt 

OsInfo[20].Value=0 

OsInfo[21].Key=blddt 

OsInfo[21].Value=240331 

OsInfo[22].Key=bldtm 

OsInfo[22].Value=1435 

OsInfo[23].Key=bldbrch 

OsInfo[23].Value=ge_release 

OsInfo[24].Key=bldchk 

OsInfo[24].Value=0 

OsInfo[25].Key=wpvermaj 

OsInfo[25].Value=0 

OsInfo[26].Key=wpvermin 

OsInfo[26].Value=0 

OsInfo[27].Key=wpbuildmaj 

OsInfo[27].Value=0 

OsInfo[28].Key=wpbuildmin 

OsInfo[28].Value=0 

OsInfo[29].Key=osver 

OsInfo[29].Value=10.0.26100.2894.amd64fre.ge_release.240331-1435 

OsInfo[30].Key=buildflightid 

OsInfo[31].Key=edition 

OsInfo[31].Value=Professional 

OsInfo[32].Key=ring 

OsInfo[32].Value=Retail 

OsInfo[33].Key=flightbranch 

OsInfo[34].Key=expid 

OsInfo[34].Value=MD:283BAEF,ME:3037091,ME:3038C64,FX:1335A3A6,ME:3038CEC,MD:3039059 

OsInfo[35].Key=fconid 

OsInfo[35].Value=19194309,0,2,0;23877894,1,2,0;35681102,0,1,0;39146010,0,2,0;42187503,0,1,0;42969627,0,1,1;43283184,0,1,0;44030954,0,1,0;45825686,0,1,0;46817969,0,2,1;47557358,0,2,1;48433541,0,2,0;48433706,0,2,0;48433719,0,1,0;48468527,0,2,0;48468541,0,2,0;48525682,0,1,1;49084341,0,1,0;49106743,0,2,0;49175271,0,2,0;49204591,0,1,0;49239926,0,1,0;49309588,0,1,0;49577493,0,1,0;49615603,0,1,0;49666144,0,1,0;49918560,0,1,0;50219409,0,1,0;50219413,0,1,0;50556886,0,2,0;50557073,0,2,0;50564196,0,2,1;50564332,0,2,0;50565209,0,1,0;50762615,0,1,0;50879031,0,1,1;51578581,0,1,0;51850502,2,2,0;52087985,0,1,0;52800232,0,1,1;53536518,0,1,0;54157537,0,1,1;54237951,0,1,0;54237969,0,1,0;54237977,0,1,0;54237988,0,1,0;54237993,0,1,0;54238000,0,1,0;55199570,0,1,0;55733275,0,2,0 

OsInfo[36].Key=containerid 

OsInfo[37].Key=containertype 

OsInfo[38].Key=edu 

OsInfo[38].Value=0 

OsInfo[39].Key=servicinginprogress 

OsInfo[39].Value=0 

OsInfo[40].Key=featureupdatependingreboot 

OsInfo[40].Value=0 

FriendlyEventName=Stopped working 

ConsentKey=MoAppCrash 

AppName=WhatsApp.exe 

AppPath=C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2502.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe 

NsPartner=windows 

NsGroup=windows8 

ApplicationIdentity=CE9D29DBD482937861A9A80789AA3A06 

MetadataHash=-86070843

Troubleshooting Steps Taken

  1. Password Replication Policy: Confirmed domain user and PC are allowed on the RODC.
  2. SFC /scannow & DISM: No integrity violations found.
  3. Repair / Reset WhatsApp Desktop via Apps & Features: No change.
  4. Reinstall WhatsApp Desktop: No change.
  5. Test Different User Accounts:
    • Local accounts on the same PC: Works fine
    • Domain account on the same PC: Crashes if RODC is the DC
    • Domain account on a writable DC: No crash
  6. Windows Updates: All up-to-date on both RODC and Windows 11 PCs.

Request for Help

  • Has anyone encountered UWP app crashes (especially WhatsApp Desktop) only when logging onto an RODC?
  • Are there known group policies, COM/DCOM permissions, or password replication quirks that might affect UWP apps?
  • Any specific RODC configuration (beyond standard Password Replication Policy changes) that allows Store apps to function normally for domain users?

I appreciate any guidance or insight from those who have experienced similar issues. Thank you in advance for your help!

Windows Server Identity and access Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes
Accepted answer
  1. Anonymous
    Jan 27, 2025, 3:50 AM

    Hi, I have found the issue.
    WhatsApp uses DPAPI master key to encrypt it's local data. The DPAPI master key is encrypted twice

    1. using user password
    2. using DC RSA public key (this second encryption is for backup, in case user password changes)

    For the second case, DPAPI tries to store it to the DC. Here RODC fails as It can't store the encrypted master key.

    The solution is turning off the second encryption by editing registry. the drawback is, if the user password changes, user won't be able to access previous WhatsApp data on the PC.

    To read more about DPAPI: Windows - Data Protection API | Penetration Testing - Red Teaming - Purple Teaming - Security Training | Tier Zero Security, New Zealand

    The registry edit hack is taken from here: DPAPI MasterKey backup failures - Windows Server | Microsoft Learn

    0 comments No comments

3 additional answers

Sort by: Most helpful
  1. Anonymous
    Jan 23, 2025, 11:33 AM

    Hello Hasibul Islam (Chaldal),

    Thank you for posting in Microsoft Community forum.

    It sounds like a complex issue, but let’s try to break it down.

    1.Please check if have configured password replication to RODC correctly.

    Understanding “Read Only Domain Controller” authentication | Microsoft Community Hub

    2.What do you mean "Domain-joined PCs pointing to a RODC"? Do you mean you create a new site linked to a subnet and put this RODC to this new site, then the IP address of domain computers belong to this subnet, am I right?

    1. Group Policy Conflicts:

    Ensure that there are no Group Policies applied to the domain users or computers that might be affecting the WhatsApp Desktop application.

    Create a new domain user and put to domain instead of any OU (I mean this new user will only applies default domain policy without any other group policy setting).

    1. Application Compatibility:

    Verify that there are no compatibility issues by testing other applications distributed via the Microsoft Store with similar configurations.

    1. Profile Issues:

    Test with a different domain user account or domain administrator or any domain admin account in Domain Admins group to see if the issue is tied to one or more specific user profiles.

    1. Permissions and Replication:

    Since you've already allowed necessary password replication, double-check to ensure there are no other replication issues with the RODC.

    1. Network and Connectivity:

    Ensure that there are no network restrictions or intermittent connectivity issues between the PCs and the RODC.

    1. Updates and Patches:** Make sure that both the Windows 11 PCs and the WhatsApp Desktop application are fully updated.
    2. Deployment Method:

    Try uninstalling and reinstalling WhatsApp Desktop from the Microsoft Store while logged in as a domain user.

    1. Local vs Domain Accounts:

    Since the issue does not occur with local accounts, compare the environment settings and permissions of local vs. domain accounts to see if there are discrepancies causing the issue.

    Meanwhile, from the description above, I understand the question is also related to Universal Windows Platform.

    Since there are no engineers dedicated to Universal Windows Platform in this forum. in order to be able to get a quick and effective handling of your issue, I also recommend that you repost your question in the Q&A forum, where there will be a dedicated UWP engineer to give you a professional and effective reply.

    Here is the link for Q&A forum.
    Questions - Microsoft Q&A

    Click the "Ask a Question" button in the upper right corner to post your question and type "Universal Windows Platform" tag and select any tags related to your productions.

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments No comments
  2. Anonymous
    Jan 26, 2025, 6:00 AM

    Hello Daisy, thanks for responding. The issue is not solved yet.

    1. I have rechecked the Password Replication configuration. Domain users and the domain computers password are being replicated as expected.
    2. Yes, you are right. I have created a new site linked to a subnet and put this RODC to this new site, then the IP address of domain computers belong to this subnet. And the domain computers have access to only this RODC.
    3. There shouldn't be any Group Policy conflict, because I have tested with exact same Group policy while joining to a writeable DC, it worked.
      I also checked by disabling other Domain policy that was applied to it except the default policy, still same
    4. Other Microsoft Store application like LibreOffice, Messenger, 3CX is working.
    5. I have tried with Domain Admin account, 2 Domain user account that have local admin access. 1 domain user account without local admin access.
    6. Replication is working fine, I have tested it by creating new user, it got replicated.
    7. Network connections are stable.
    8. Windows 11 PC's and Whatsapp are up to date.
    9. I have tried repairing, resetting, reinstalling Whatsapp as domain user and domain admin from Microsoft Store.
    10. I found no discrepancies between local and domain users, also it's working for the same domain users when it's connected to a writeable Domain Controller.

    As per your suggestion, I have posted the issue in Microsoft Q&A:
    WhatsApp Desktop (UWP) Crashes on Windows 11 Pro Joined to RODC (Server 2019) - Microsoft Q&A

    My Microsoft Q&A post got deleted, so posted in Stack Overflow:
    Staging Ground: WhatsApp Desktop (UWP) Crashes on Windows 11 Pro Joined to RODC (Server 2019) - Stack Overflow

    0 comments No comments
  3. Anonymous
    Jan 27, 2025, 8:25 AM

    Hello

    Greetings!

    Thank you for your update and sharing!

    I am so glad that the issue has been resolved. I think it will be helpful to the people who has similar problem.

    Have a nice day!

    Best Regards,
    Daisy Zhou

    0 comments No comments