Crowdstrike … the dilemma
“It appears that in many cases, whilst the update was distributed automatically over the internet to systems, the workaround to fix the problem requires the machines to be rebooted in Windows’ safe mode, which usually requires physical access. The person at the keyboard then needs to know the password for the computer’s administrator account, and use this level of access to delete a file within a subdirectory of Windows’ System32. This process can be more complicated where Microsoft’s BitLocker encryption is in use. In many organisations the recovery keys for BitLocker have themselves been stored on a computer unable to start properly due to the CrowdStrike update.”