Windows Security Health Crash after Windows 11 22H2 Upgrade

BrianInEngland · Apr 28, 2023

Jimbo93 said:
@hexaae, I cannot completely eliminate the crashes. But by finding the best chipset and MEI drivers for my board and resetting the AV platform, I can reduce the problem from crashing most of the time to only crashing about 10% of the time.

@BrianInEngland, Hi, this problem seems to be hardware related to me. Or do you think that every windows eleven system has the problem? I really don't want to turn the TPM off.

The only way to know is to test it. I have the problem both with a discrete TPM and the AMD fTPM. With the latest malware platform update 1.0.2303.27001 the Security app only crashes if I view the TPM details, otherwise it's fine. This is using the AMD fTPM.

BrianInEngland · May 7, 2023

Jimbo93 said:
@hexaae, I cannot completely eliminate the crashes. But by finding the best chipset and MEI drivers for my board and resetting the AV platform, I can reduce the problem from crashing most of the time to only crashing about 10% of the time.

@BrianInEngland, Hi, this problem seems to be hardware related to me. Or do you think that every windows eleven system has the problem? I really don't want to turn the TPM off.

Can't say for sure but it does affect lots of users

hexaae · May 7, 2023

In the past days I used an AMD PC with TPM 2.0 and R9 7945H: I almost never had crashes with Defender, and was much harder to reproduce but at least a pair of times it still happened... so IMHO it affects ALL PCs in the world. Embarassing MS still didn't provide a fix.

cta62 · May 7, 2023

So as a workaround for the crashing bug if you use Group Policy and choose to hide the Device Security section the service no longer crashes and you can keep TPM enabled you just won't be able to view the Device Security section anymore which is pointless anyways.

hexaae · May 7, 2023

cta62 said:
So as a workaround for the crashing bug if you use Group Policy and choose to hide the Device Security section the service no longer crashes and you can keep TPM enabled you just won't be able to view the Device Security section anymore which is pointless anyways.

This one?

Device security in Windows Security - Windows Security

Use the Device security section to manage security built into your device, including Virtualization-based security.

learn.microsoft.com

Testing now... Seems to be working fine indeed...

cta62 · May 7, 2023

hexaae said:
This one?

Device security in Windows Security - Windows Security

Use the Device security section to manage security built into your device, including Virtualization-based security.

learn.microsoft.com

Testing now... Seems to be working fine indeed...

Glad to hear it.

TheVisitor · May 8, 2023

For users of Windows Home there is no Group Policy editor... My solution ? Just don't open Defender at all...

hexaae · May 8, 2023

There should be a way through the Registry even without Group Policy UI for Windows Home...

hexaae · May 8, 2023

As far as I can see it should be:

Code:

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security]
"UILockdown"=dword:00000001

(with the modification: no Device Security and no crashes anymore!)

righN · May 8, 2023

hexaae said:
As far as I can see it should be:

Code:

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security] "UILockdown"=dword:00000001

View attachment 59670
(with the modification: no Device Security and no crashes anymore!)
View attachment 59671

With this modification, seems to be better, but for me the app still takes quite a bit of time to load for some reason.

hexaae · May 8, 2023

righN said:
With this modification, seems to be better, but for me the app still takes quite a bit of time to load for some reason.

There's no crash, that's the important thing. And Defender (Security Center) works reliably at least when you open it... no missing icons/status and non-working items anymore. That's a good temporary workaround, waiting for a MS official fix. Also local file checks with Defender won't randomly crash anymore.

righN · May 8, 2023

hexaae said:
There's no crash, that's the important thing. And Defender (Security Center) works reliably at least when you open it... no missing icons/status and non-working items anymore. That's a good temporary workaround, waiting for a MS official fix. Also local file checks with Defender won't randomly crash anymore.

Still actually crashes for me, Event Viewer even shows it. :/

cta62 · May 8, 2023

Odd mine opens instantly and no crashes after testing for 4 days like this.

righN · May 8, 2023

cta62 said:
Odd mine opens instantly and no crashes after testing for 4 days like this.

Maybe the Registry edit isn't as good as a solution as editing the Group Policy?

Windplay87 · May 8, 2023

Hi guys and thanks for the gpedit.msc tip. It works perfectly, I can finally open Windows Defender without any bug !
Can't wait for a patch from Microsoft to solve the problem with TPM for good !

cta62 · May 8, 2023

Windplay87 said:
Hi guys and thanks for the gpedit.msc tip. It works perfectly, I can finally open Windows Defender without any bug !
Can't wait for a patch from Microsoft to solve the problem with TPM for good !

No problem glad to hear it works for you as well!

Windplay87 · May 8, 2023

Thank you ! This is perfect. It's been over a year since my Windows Defender crashed due to TPM ! and now with your tip I can open it and browse without any problem.
I hope Microsoft will speed up the resolution of this bug.

hexaae · May 8, 2023

righN said:
Maybe the Registry edit isn't as good as a solution as editing the Group Policy?

Mmmh, I'm not expert with Group Policy, sorry... hoped that registry modification was enough even on Home Edition. Do you still see the Device security icon when you open Security Center?
2 days and never crashed again here (Windows 11 Pro)

EDIT: just found this you can try on Win 11 Home GitHub - Fleex255/PolicyPlus: Local Group Policy Editor plus more, for all Windows editions

cta62 · May 8, 2023

hexaae said:
Mmmh, I'm not expert with Group Policy, sorry... hoped that registry modification was enough even on Home Edition. Do you still see the Device security icon when you open Security Center?
2 days and never crashed again here (Windows 11 Pro)

EDIT: just found this you can try on Win 11 Home GitHub - Fleex255/PolicyPlus: Local Group Policy Editor plus more, for all Windows editions

I do not see the icon. It is completely gone from the Security Center preventing crashes. It is useless anyways as you can't really do anything in there.

righN · May 9, 2023

hexaae said:
Mmmh, I'm not expert with Group Policy, sorry... hoped that registry modification was enough even on Home Edition. Do you still see the Device security icon when you open Security Center?
2 days and never crashed again here (Windows 11 Pro)

EDIT: just found this you can try on Win 11 Home GitHub - Fleex255/PolicyPlus: Local Group Policy Editor plus more, for all Windows editions

No, can't see the icon. And it did crash again and could see it in Event Viewer, to make sure my mind wasn't playing games with me. PolicyPlus doesn't seem to work for some reason on my system. It doesn't even open, even crashes my browser when I try to open it from Downloads tab. Yes, I do have .NET Framework 4.5 installed.