Microsoft releases updated recovery tool to address CrowdStrike-induced Windows issues

Microsoft has announced the release of an updated recovery tool to address issues stemming from the CrowdStrike Falcon agent affecting Windows clients and servers. Available in the Microsoft Download Center, the signed Microsoft Recovery Tool offers two distinct repair options for IT administrators.

The first option, “Recover from WinPE”, generates boot media to facilitate device repair. This method allows for quick and direct system recovery without necessitating local admin privileges. However, administrators may need to manually input the BitLocker recovery key if BitLocker is enabled, and should consult third-party disk encryption vendors for additional recovery guidance.

The second option, “Recover from safe mode”, also produces boot media but enables booting into safe mode. Administrators can then log in using an account with local admin privileges to execute remediation steps. This method may bypass the need for BitLocker recovery keys, making it suitable for devices with TPM-only protectors, non-encrypted devices, or scenarios where the BitLocker recovery key is unknown.