> Source: [sk173486](https://support.checkpoint.com/results/sk/sk173486)

# sk173486 - BSOD when Boot-Start Driver Initialization GPO Policy is set to "Good only" and Endpoint Anti-Malware installed

| Property | Value |
|----------|-------|
| Solution ID | sk173486 |
| Date Created | 2021-05-11 |
| Last Modified | 2021-05-18 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |

## Symptoms

- BSOD when Boot-Start Driver Initialization GPO Policy is set to "Good only", and Endpoint Anti-Malware is installed.

## Cause

Each driver can be classified as Good, Bad or Unknown.  

The Check Point `epelam.sys` driver does not have the functionality that classifies the type of the driver that is loading during the system boot. Consequently, it returns an "Unknown" classification for any drivers (This may also include drivers that are needed to boot the system).  

When the GPO is set to "Boot-Start Driver Initialization Policy" - "Good only" drivers for boot, all drivers are blocked because of the "Unknown" classification.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content