Win2008 R2 WER ( error reporting ) LocalDumps blocked by what?

 

I Just want to recover crash dumps of my own 32bit applications.

I tried the following:

  • I followed the steps at MSDN "Collecting User-Mode Dumps": http://msdn.microsoft.com/en-us/library/windows/desktop/bb787181%28v=vs.85%29.aspx

  • Somewhere on the internet I saw a mention about WER registry keys for 32 bit apps do NOT have to be added under HKLMSoftwareWOW6432NodeMicrosoftWindowsWindows Error ReportingLocalDumps

  • Also that the ..Windows NTAeDebugAuto (REG_SZ) value must be "0"

    • Additionally, I have WER error entries in the 'system event viewer' under "Windows LogsApplications&ServicesMicrosoftWindowsWER-DiagnosticsOperational" Showing messages "Possible heap corruption detected (code 3221225477)"

    I don't know if this message relates to my test-app creating a NPE, or if this is WER itself having a problem?

    I just can't get it to work :( Can anyone give me some clues ?

    Update : For another fresh 2008R2 x64 machine, i just did the 

    HKLMSoftware... ReportingLocalDumpsDumpFolder = "c:crashdumps"
HKLMSoftware... ReportingLocalDumpsDumpType = 2   (REG_DWORD)
HKLMSoftware... ReportingLocalDumpsDumpCount = 20 decimal (REG_DWORD)

    And running the nulpointer-terster worked as expected.

    So im thinking there must be a settings in these other machines which prohibit LocalDumps from being used, although the LocalDumps registry-keys are there..

  • Create key: HKLMSoftwareMicrosoftWindowsWindows Error ReportingLocalDumps
  • Create REG_DWORD value: HKLMSoftwareMicrosoftWindowsWindows Error ReportingLocalDumps as 2 (=full dump).
  • Create REG_EXPAND_SZ value: HKLMSoftwareMicrosoftWindowsWindows Error ReportingLocalDumps as C:Dumps or where you like. Ensure that this folder actually exists.

    • I think you have already checked most of the common problems. There are 3 more:

    Permissions of the folder to write to

    Looking at the permissions of the folder C:ProgramDataMicrosoftWindowsWER it has

  • Read & execute
  • List folder contents
  • Read

    • Creating a subfolder LocalDumps will inherit the permissions.

    So you should either modify the permissions of that folder or use a different folder with write permissions.

    Permissions of the Registry key

    Windows might not be able to read the Registry settings if the permissions do not allow it. Eg the following (really silly) permissions will prevent a LocalDump as well:

    LocalDumps权限

    LocalDumps is disabled

    Make sure that there is no DWORD Disabled with a value of 1 in HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsWindows Error ReportingLocalDumps

    链接地址: http://www.djcxy.com/p/60612.html

    上一篇: Java日期月份差异

    下一篇: Win2008 R2 WER（错误报告）LocalDumps被什么拦截？