BSOD 41 (SECURITY_SYSTEM): causes and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: SECURITY_SYSTEM

Could be also:
Constant	Type	OS
KERN_LOCK_OWNED_SELF	Kern return	Mac
ippStsI18nMsgCatalogInvalid	Intel Ipp Status	Any
EWOULDBLOCK	errno	Linux
EPROTOTYPE	errno	Mac
ELNRNG	errno	Solaris
ENOTEMPTY	errno	Windows

Previous	Next
CORRUPT_ACCESS_TOKEN	INCONSISTENT_IRP

SECURITY_SYSTEM

SECURITY_SYSTEM is bug check 0x29. Microsoft marks it very infrequent and supplies no public meanings for the four bug-check parameters. The broad symbolic name does not identify a logon failure, access-control entry, authentication package, or compromised account.

Security terminology is not a root-cause field

Windows security spans kernel objects and multiple subsystems. With no parameter contract, a page cannot safely map 0x29 to one of them from the constant alone. Preserve the dump and use the symbolized execution path to identify the security-related or other kernel code actually present when the bug check was issued.

Investigation boundaries

Do not reset passwords, ACLs, or machine trust solely because the stop is named SECURITY_SYSTEM.
Run !analyze -show 0x29 and analyze the captured dump with !analyze -v.
Keep raw arguments for comparison but avoid presenting them as user, token, or status identifiers without debugger or build-specific evidence.

References

Looking for a different code? Search another status or error code.