Share via

No kernel memory dump created on Windows 7 or Windows 8.

  • Article

Applies to:

Windows 7

Windows 8

For those of you coming from a Windows XP world, you will notice that when a bugcheck (a.k.a. Blue Screen of Death (B.S.O.D.)) occurs, that you don’t get a kernel only memory.dmp file created in %systemroot% (c:\windows).

That is due to change in behavior starting with Windows 7 as described in:

Kernel dump storage and clean up behavior in Windows 7

https://blogs.msdn.com/b/wer/archive/2009/02/09/kernel-dump-storage-and-clean-up-behavior-in-windows-7.aspx

For the domain administrators, if you want to have the memory.dmp’s analyzed, all you have to do is use Group Policy Preferences to deploy the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl

AlwaysKeepMemoryDump (DWORD) 1 (hex)

Comments

  • Anonymous
    January 01, 2003
    Good to know.