NS_E_GLITCH_MODE (0XC00D0195) – Stop Unreliable Server
Your server's unstable because multiple components failed. Fix it fast with a reboot, then check services and logs before deeper troubleshooting.
What's Actually Happening Here
Your server threw 0XC00D0195, also called NS_E_GLITCH_MODE. This isn't a single broken part – it's the server telling you that multiple components have failed or are misbehaving. Think of it like a car's check engine light that only comes on when three sensors go haywire at once.
This error typically pops up in scenarios like:
- A file server that hosts both IIS and a database service (e.g., SQL Server Express) – one crashes, then the other, then both refuse to restart cleanly.
- A domain controller with DNS and DHCP services where one service fails, and the other gets corrupted during a failed update.
- Hyper-V hosts where the management service and a guest cluster both flake out after a power failure.
I've seen this most often after a Windows Update that partially installs, leaving services half-updated and tangled. But it can also happen after a sudden power loss or a failed backup that locks up essential NTFS volumes.
Quick Fix (30 Seconds) – Reboot the Server
Yes, it's the boring answer, but it works more often than you'd think. What's happening is that the error might be a transient state caused by temporary file locks or memory corruption that clears with a full restart.
shutdown /r /t 0
If you can't RDP in, try a remote shutdown from another machine:
shutdown /r /m \\ServerName /t 0
Once it comes back, check the event logs (Event Viewer > Windows Logs > System). Look for any critical or error events with ID 41 (unexpected shutdown) or 1001 (bug check). If the error doesn't reappear, you're done. If it does, the problem is persistent – move on.
Moderate Fix (5 Minutes) – Service Check & Reset
The real fix is identifying which components are in glitch mode. Here's a PowerShell one-liner that lists all services that are not running:
Get-Service | Where-Object { $_.Status -eq 'Stopped' -and $_.StartType -ne 'Disabled' } | Format-Table Name,DisplayName,Status
These are the likely culprits. Common offenders:
- W3SVC (World Wide Web Publishing Service) – if IIS is involved
- MSSQLSERVER or SQLSERVERAGENT – if SQL Server is part of the stack
- DNS – if the server is a domain controller
- Netlogon – can cause authentication storms
For each stopped service, try starting it:
Start-Service -Name W3SVC
If a service refuses to start, check its dependency chain:
sc qc W3SVC
Look at the DEPENDENCIES line. If any of those are missing or stopped, that's your root cause. Fix the dependency first.
Also run this to check for corrupted system files that might cause component failures:
sfc /scannow
If SFC finds errors but can't fix them, move to the advanced section.
Advanced Fix (15+ Minutes) – Event Log Deep Dive & Component Repair
When simple restarts and service resets don't cut it, you need to trace the exact sequence of failures. Open Event Viewer and filter for events from the last 24 hours:
- Navigate to
Windows Logs > System. - Click Filter Current Log and check Critical, Error, and Warning.
- Look for a chain of errors around the same timestamp. For example, a
Service Control Managererror (ID 7000, 7001, or 7009) followed by an error from the service that failed.
The key here is the sequence. If you see ID 7000 (service failed to start) then ID 7034 (service terminated unexpectedly), you're looking at a service that keeps crashing. That's your first component.
Now check Application log for errors from that same service – often you'll find a .NET Runtime error or a SQL Server error with a stack trace.
Once you've identified the failing component, repair it:
- For IIS: Run
dism /online /enable-feature /featurename:IIS-WebServer /allto reinstall IIS components. - For SQL Server: Run a repair from the SQL Server setup media (
setup.exe /ACTION=REPAIR). - For DNS: Flush the DNS cache and reset zones:
ipconfig /flushdnsanddnscmd /zonereset. - For general .NET dependency: Repair .NET Framework:
dism /online /cleanup-image /restorehealththensfc /scannowagain.
If the error persists after repairing the identified component, there's a chance the issue is in the registry. Open regedit and navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[ServiceName]
Check the ImagePath value – a corrupt path (e.g., pointing to a deleted file) will prevent the service from starting. Fix the path or reinstall the service.
Final nuclear option: run System File Checker with the offline image restore flag:
dism /online /cleanup-image /restorehealth /source:WIM:C:\path\to\install.wim:1 /limitaccess
This uses a known-good Windows image to replace corrupted system files. You'll need the original Windows installation media or an ISO file for the source path.
After any of these repairs, reboot and check event logs again. If the glitch mode error is gone, you're stable. If it's still there, you may need to restore from a backup or rebuild the server – that's beyond a single fix.
Was this solution helpful?