Ntdebugging Blog
Microsoft Advanced Windows Debugging and Troubleshooting - Contributions to this blog are made by the Microsoft Global Business Support - Windows Serviceability team.
What Did Storport Do With My I/O?
In a previous article I showed how to track an I/O request from the filesystem, through the class...
Author: ntdebug Date: 06/21/2012
Hotfix to Enable Mini-Filter Performance Diagnostics With XPerf for Windows Server 2008R2
Greetings ntdebugging community, Bob here again and today I would like to let everyone know about a...
Author: ntdebug Date: 05/31/2012
Debugging a Crash, Found a Trojan
Hi, I'm Manish from Global Escalation Services. I would like to present a multiple random bug check...
Author: ntdebug Date: 05/23/2012
Updated Archive of the NtDebugging Twitter Debug Tips
Every Wednesday (usually) we post a debug tip to our twitter page at...
Author: ntdebug Date: 04/30/2012
Troubleshooting Memory Leaks With Just a Dump
Hello debuggers, the debug ninja is back again. Sometimes we have a scenario where a process...
Author: ntdebug Date: 04/26/2012
How the Clipboard Works, Part 2
Last time, we discussed how applications place data on the clipboard, and how to access that data...
Author: ntdebug Date: 03/29/2012
How the Clipboard Works, Part 1
Recently I had the opportunity to debug the clipboard in Windows, and I thought I’d share some of...
Author: ntdebug Date: 03/16/2012
What Should Never Happen... Did
Hi, this is Bob Golding; I wanted to write a blog about an interesting hardware issue I ran into....
Author: ntdebug Date: 02/23/2012
Identifying Global Atom Table Leaks
Hi, it's the Debug Ninja back again with another debugging adventure. Recently I have...
Author: ntdebug Date: 01/31/2012
Stop 0x19 in a Large Pool Allocation
Hello all, Scott Olson here again to share another interesting issue I recently debugged with pool...
Author: ntdebug Date: 01/27/2012
My Kernel Debugger Won't Connect
Hello ntdebugging readers, the Debug Ninja is back again with a quick blog this holiday...
Author: ntdebug Date: 12/29/2011
Call Stacks for Pool Allocations
Hello, it's the Debug Ninja back again for another NtDebugging Blog article. For as long as I...
Author: ntdebug Date: 10/31/2011
Bcdedit Tips and Tricks For Debugging Part 1
Hello everyone, my name is Sean Walker, and I am on the Platforms OEM team in Washington. This...
Author: ntdebug Date: 09/21/2011
Determining The Interrupt Line For A Particular PCI-E Slot
Hi debuggers, this is Graham McIntyre again. These days I’m working more closely with hardware so I...
Author: ntdebug Date: 09/01/2011
For testing purposes only, and other desktop watermarks
Hi all, Matt here again. One of our team’s main functions is to work with our development...
Author: ntdebug Date: 08/05/2011
LUN Discovery in a Nutshell
The way the disk configuration is determined on a Windows system is by a process called “discovery”....
Author: ntdebug Date: 07/21/2011
Updated Archive of the Debug Ninja’s Twitter Debug Tips
Every Wednesday (usually) I post a debug tip to our twitter page at...
Author: ntdebug Date: 07/20/2011
A Classic Case of Whodunit
Sometimes we encounter problems that just don't make sense. I don't mean a high powered lawyer...
Author: ntdebug Date: 06/29/2011
NTFS And 4K Disks
Since the 1960’s, hard disks have always used a block size of 512 bytes for the default...
Author: ntdebug Date: 06/28/2011
Understanding Storage Timeouts and Event 129 Errors
Greetings fellow debuggers, today I will be blogging about Event ID 129 messages. These...
Author: ntdebug Date: 05/06/2011
The Mystery of Lsass.exe Memory Consumption, (When all components get involved)
Hi All, this is Karim Elsaid and I’m a Support Escalation Engineer working with the Dubai platforms...
Author: ntdebug Date: 04/27/2011
Control Panel Policy and the Missing Icon
A customer recently reported a rather peculiar problem. They were working on a roll out of...
Author: ntdebug Date: 04/22/2011
Windows 7 XP Mode – Auto Publish ‘Not Available’
Hello All, Ron Riddle here again to share another mystery relating to the XP Mode Auto Publish...
Author: ntdebug Date: 03/28/2011
Interpreting a WHEA error for a MCA fault
Howdy fellow debuggers! This is Graham McIntyre, I am an Escalation Engineer in Platforms Global...
Author: ntdebug Date: 01/28/2011
Hunting for Bugs, but Found a Worm
Hi All, my name is Ron Riddle and I’m an Escalation Engineer on the core Windows team. I...
Author: ntdebug Date: 01/07/2011
New Joint Citrix/Microsoft Facebook Forum
Got a virtualization issue?.. Not sure if it’s a Microsoft or Citrix problem?. Jump on the new...
Author: ntdebug Date: 11/04/2010
Expanding Netmon to aid in debugging
A walk-through of creating a Netmon parser in the context of a real case As is obvious to frequent...
Author: ntdebug Date: 08/26/2010
Debugging a Bugcheck 0x109
My name is Nader Khonsari. I am an escalation engineer in Platforms Global Escalation Services. I...
Author: ntdebug Date: 08/10/2010
Debugging services startup in Svchost from a kernel mode debug session
Windows shared services allow us to run system services together in a single service by having...
Author: ntdebug Date: 07/20/2010
I Want A Debugger Robot
Hi, My name is Sabin from the Platforms Global Escalation Services team at Microsoft, and today I...
Author: ntdebug Date: 06/30/2010
Part 3: Understanding !PTE - Non-PAE and X64
Hello, Ryan Mangipano (ryanman) again with part three of my series on understanding the output of...
Author: ntdebug Date: 06/22/2010
x64 Manual Stack Reconstruction and Stack Walking
My name is Trey Nash and I am an Escalation Engineer on the Core OS team. My experience is as a...
Author: ntdebug Date: 05/12/2010
Storport ETW Logging to Measure Requests Made to a Disk Unit
Greetings NTDEBUGGING community, Bob here again, and today I would like to let everyone know about a...
Author: ntdebug Date: 04/22/2010
Understanding VSS in DPM
Data Protection Manager 2007 utilizes Windows’ Volume Shadow Copy Service to protect Data Sources on...
Author: ntdebug Date: 04/16/2010
A Case of Mysterious Memory Corruption
Hi, this is Chad from the OEM team. You may remember me from such posts as “Debugging a bluescreen...
Author: ntdebug Date: 04/15/2010
Archive of the Debug Ninja’s Twitter debug tips
Every Wednesday I post a debug tip to our twitter page at www.twitter.com/ntdebugging. This blog is...
Author: ntdebug Date: 04/15/2010
Understanding !PTE, Part2: Flags and Large Pages
Hello, it's Ryan Mangipano with part two of my PTE series. Today I'll discuss PDE/PTE flags, the...
Author: ntdebug Date: 04/14/2010
Upcoming Blog ARTICLES
Working on the Global Escalation Services Team at Microsoft is really a cool gig. We’re privileged...
Author: ntdebug Date: 04/02/2010
How to use the DedicatedDumpFile registry value to overcome space limitations on the system drive when capturing a system memory dump
Prior to Windows Vista and Windows Server 2008 we had to keep a large page file on the system drive...
Author: ntdebug Date: 04/02/2010
Critical Device Database TIP
On a fairly regular basis, Bob Golding, our resident GES storage guru, sends out debugging tips to...
Author: ntdebug Date: 03/25/2010