Server 2022 - Process Explorer Error writing dump file Access is denied

Question

I face the following error on Windows Server 2022 in creating Minidump or Full Dump of Process Explorer.

Error writing dump file : Access is denied.

Please help.

Answer 1

Hello,

Here are some steps you can try:

1. Run Process Explorer as Administrator

Ensure that you are running Process Explorer with elevated privileges. Right-click on the Process Explorer executable and select "Run as administrator".

2. Check File Path Permissions

Check the Destination Directory: Make sure the directory where you're trying to save the dump file has the correct permissions. You should have written access to this directory. If you do not have write access, you may need to modify the security settings of the folder. Right-click the folder, go to Properties, then the Security tab, and add your user account or the group you belong to (e.g., Administrators) with Full Control.

3. Check for Antivirus/Firewall Interference

Sometimes, antivirus software or a firewall can block the creation of dump files. Temporarily disable these to see if they are causing the issue. If disabling them resolves the problem, you may need to configure an exception for Process Explorer.

4. Verify Disk Space

Ensure that there is enough free disk space on the drive where you are trying to save the dump file. Insufficient disk space could also cause the operation to fail.

Best Regards,

Hania Lian

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

 

Answer 2

Hi,

I have tried the followings in my testing VM. Unfortunately, I faced the same error. The DMP file was created and then disappeared, when I clicked "OK" to close the error message box.

1. Besides "Run as administrator", I have even disabled User Account Control in Registry and then rebooted the server.
2. I have already "Full Control" in the destination folder's NTFS permission where to store the dump file.
3. There was no 3rd party antivirus and firewall software. Meanwhile, the built-in Microsoft Windows Defender has been removed and the server was rebooted. Three types of network (domain, private and public network) have been turned off in the built-in Windows Firewall.

Furthermore, belows under "App & browser control" have also been turn off.

A. Reputation-based protection

"Check apps and files"

"Potentially unwanted app blocking"

B. Exploit protection

System settings

However, "High-entropy ASLR" was dimmed to select "Off".

I have seen "SecHealthUI.exe" (Windows Defender application) in Services was shown as "Suspended" status.

4. There was 77GB free space in drive C.

Please give me ideas to try further.

Answer 3

I have tried further to reboot the server to Safe Mode. However, the same error message was prompted.