Windows & BSOD · critical

How to fix Stop code 0xC000021A (WINLOGON_FATAL_ERROR)

Windows & BSOD troubleshooting guide

What this error means

Windows stops with code 0xC000021A, often during startup or right after an update. Microsoft names this bug check WINLOGON_FATAL_ERROR: a user-mode subsystem that Windows cannot run without, such as Winlogon or the Client Server Run-Time Subsystem (CSRSS), was fatally compromised. Microsoft says third-party software is the most common culprit, especially a newly installed or updated driver, service or application. Mismatched system files, for example after restoring a disk from a backup, can cause it too.

Updated

Applies to
Windows 11 and Windows 10
Difficulty
Intermediate
Before changes
Low to medium; System Restore and Reset remove recently installed apps

Reviewed by Matyáš Rada · Documentation checked: 2026-10-31 · Checked against Microsoft's bug check documentation; not tested on every configuration.

Before you begin

If Windows does not start, force it off three times during startup to open the recovery menu, or use a Windows installation USB > Repair your computer. If Windows cannot start, see the startup guide.

Work through these checks

0 of 7 complete
01Start in Safe Mode

Microsoft recommends Safe Mode to isolate the cause, because it loads only basic drivers and services.

  1. In the recovery menu choose Troubleshoot > Advanced options > Startup Settings > Restart.
  2. Press 4 for Safe Mode or 5 for Safe Mode with Networking.
What to expect

Windows starts in Safe Mode.

If it does not help

If Safe Mode works, a third-party program or driver is the likely cause; continue with step 2. If it does not, go to step 3.

Browse related errors
02Remove recently installed software

Microsoft says third-party software is the most common culprit and should be removed or disabled to isolate the cause.

  1. In Safe Mode, open Settings > Apps > Installed apps, sort by install date, and uninstall programs and drivers added just before the problem started.
  2. Pay attention to antivirus, VPN, system tweaking, theme or sign-in customization tools.
  3. Restart normally.

Keep Microsoft Defender on when you remove another antivirus.

What to expect

Windows starts without the stop code.

If it does not help

Contact the program's maker about an update before reinstalling it.

Browse related errors
03Uninstall the latest update or use System Restore

If the error started after an update or a software change, returning to the previous state is the fastest fix.

  1. In the recovery menu, choose Troubleshoot > Advanced options > Uninstall Updates and remove the latest quality update.
  2. Or choose System Restore and pick a point from before the problem.

System Restore removes apps and drivers installed after the restore point, but not personal files.

What to expect

Windows starts normally.

If it does not help

Pause updates for a week and install them again later.

Browse related errors
04Repair system files

Microsoft lists mismatched system files as a cause and recommends SFC.

  1. In Windows or Safe Mode, open Terminal (Admin) and run DISM /Online /Cleanup-Image /RestoreHealth, then sfc /scannow.
  2. If Windows does not start, run sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows from the recovery Command Prompt (check the drive letter with dir first).
What to expect

SFC reports no remaining problems.

If it does not help

If you restored the disk from a backup, check whether a newer version of the backup program is available, as Microsoft suggests.

Browse related errors
05Scan for malware

Microsoft recommends a virus scan that also checks the Master Boot Record.

  1. Open Windows Security > Virus & threat protection > Scan options.
  2. Choose Microsoft Defender Antivirus (offline scan) and click Scan now.
What to expect

No threats are found, or they are removed.

If it does not help

If threats were found, repeat step 4 afterwards.

Browse related errors
06Check the Event Viewer

Microsoft recommends checking the System log for critical errors from the same time as the crash.

  1. Open Event Viewer (Win + R, eventvwr.msc) > Windows Logs > System.
  2. Look for critical errors and failed services just before the restart, and search the named program or driver.
What to expect

You find the program or driver involved.

If it does not help

Update or remove it, and check that Windows is current (Win + R, winver, then Windows Update).

Browse related errors
07Reset Windows if nothing else works

A reset replaces all system files when they cannot be repaired.

  1. Back up your files, if necessary by connecting the disk to another PC.
  2. Choose Troubleshoot > Reset this PC > Keep my files.

Reset this PC removes installed apps even when you keep your files.

What to expect

Windows starts normally.

If it does not help

Reinstall programs one at a time and watch whether the error returns.

Browse related errors

Possible causes

  • A newly installed or updated driver, service or program
  • Mismatched or damaged system files, for example after a backup restore
  • A Windows update that did not install completely
  • Malware
  • Security or system tweaking software interfering with sign-in

Useful Windows tools

These commands open Windows tools. Review changes before applying them.

winver
eventvwr.msc

Sources & further reading