OneDrive - Random Workstation Crashes

[chrisjako]

Our configuration is to use home areas for onedrive, configuration is SSO and installed into the C:\Program Files (x86)\Microsoft Onedrive\ folder for all users

 

I have a policy in place which start OneDrive.exe from this location on login

 

For most part it works seamlessly with the exception of a few random computers which simply do not have the blue cloud icon in the taskbar however the user is still able to login and does not receive any sort of error whatsoever that OneDrive is not loaded. On these workstations where it fails to load initially, if you search for and open OneDrive from the start menu, the program loads up and auto signs in the user as you would normally expect it to.

 

The problem this is causing is that users (students mainly) are not recognising that OneDrive has not started, they are then saving files to a local profile location which

later gets deleted via our delprof script.

 

Looking at event viewer on these workstations i can see the same event ID occuring:

 

EVENT 1000

 

Faulting application name: OneDrive.exe, version: 19.192.926.12, time stamp: 0x5dc49f3f

Faulting module name: FileSyncClient.dll, version: 19.192.926.12, time stamp: 0x5dc4a0a1

Exception code: 0xc0000005

Fault offset: 0x001e7715

Faulting process ID: 0x27f0

Faulting application start time: 0x01d5b02088151740

Faulting application path: C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe

Faulting module path: C:\Program Files (x86)\Microsoft OneDrive\19.192.0926.0012\FileSyncClient.dll

Report ID: 79d3907a-b16f-47ab-982c-63cef4aeb17b

Faulting package full name:

Faulting package-relative application ID:

 

 

 

- System

- Provider

[ Name] Application Error

 

- EventID 1000

[ Qualifiers] 0

 

Level 2

 

Task 100

 

Keywords 0x80000000000000

 

- TimeCreated

[ SystemTime] 2019-12-11T12:43:30.793252500Z

 

EventRecordID 21332

 

Channel Application

 

Computer R74-16

 

Security

 

- EventData

OneDrive.exe

19.192.926.12

5dc49f3f

FileSyncClient.dll

19.192.926.12

5dc4a0a1

c0000005

001e7715

27f0

01d5b02088151740

C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe

C:\Program Files (x86)\Microsoft OneDrive\19.192.0926.0012\FileSyncClient.dll

79d3907a-b16f-47ab-982c-63cef4aeb17b

 

 

 

 

 

Has anyone else experienced this same issue? I am thinking of writing a scheduled task script to check if the process is running every 5 mins and if not to start OneDrive.exe however i would rather treat the cause or the problem and not the symptom

[chrisjako]

If anyone else is interested in a resolution for this i have setup a scheduled task which checks to see if onedrive is running, if not executes the onedrive program

 

Its on GPO as a batch file scheduled task to run every 5 mins whilst this seems a bit extreme it at least only affects those who haven't had the program loaded for whatever reason

 

@ECHO OFF

SET MyProcess=onedrive.exe

ECHO "%MyProcess%"

TASKLIST | FINDSTR /I "%MyProcess%"

IF ERRORLEVEL 1 (GOTO :A) ELSE (GOTO :B)

 

:A

start "" "C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe"

 

:B

Exit

[intraclast]

Hi,

 

I have a very similar problem. The event log is the same. It seems to crash very soon after logon, and I think it only crashes for users that are new to that PC (new profile).

 

Unfortunately the scheduled task idea does not work for me as I have cmd and powershell locked down for students with Applocker and onedrive.exe needs to be run in the logged on users context. The scheduled task tries to run cmd as the user and cmd gets blocked.

 

I was wondering if you had found out anything else about the issue? It does not seem to be a wide spread problem.

 

Thanks

[chrisjako]

It's not new users on that PC for us which is causing the crash, that would be almost 90% of all login sessions since we delete local profiles after x amount of days

 

I have converted it to a VBS now which runs invisible - also there is papercut added to the script since that sometimes does not load either

 

I'll post the code tomorrow morning if you send me a PM to remind me

[intraclast]

PM sent,

 

Thanks!

[chrisjako]

OPTION EXPLICIT
DIM strComputer,strProcess

strComputer = "." ' local computer
strProcess = "onedrive.exe"

' Check if Onedrive is running on specified computer (. = local computer)
IF isProcessRunning(strComputer,strProcess) THEN
WScript.Quit
ELSE

Dim objShell
Set objShell = WScript.CreateObject( "WScript.Shell" )
objShell.Exec("c:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe")
Set objShell = Nothing

END IF

' Function to check if a process is running
FUNCTION isProcessRunning(BYVAL strComputer,BYVAL strProcessName)

DIM objWMIService, strWMIQuery

strWMIQuery = "Select * from Win32_Process where name like '" & strProcessName & "'"

SET objWMIService = GETOBJECT("winmgmts:" _
	& "{impersonationLevel=impersonate}!\\" _ 
		& strComputer & "\root\cimv2") 


IF objWMIService.ExecQuery(strWMIQuery).Count > 0 THEN
	isProcessRunning = TRUE
ELSE
	isProcessRunning = FALSE
END IF

END FUNCTION

 

You should be able to set this vbs as a scheduled task in a user based GPO without issue

[intraclast]

Thanks, I'll give that a go.