Applies to:
Windows 7
Windows 8
For those of you coming from a Windows XP world, you will notice that when a bugcheck (a.k.a. Blue Screen of Death (B.S.O.D.)) occurs, that you don’t get a kernel only memory.dmp file created in %systemroot% (c:\windows).
That is due to change in behavior starting with Windows 7 as described in:
Kernel dump storage and clean up behavior in Windows 7 http://blogs.msdn.com/b/wer/archive/2009/02/09/kernel-dump-storage-and-clean-up-behavior-in-windows-7.aspx
Kernel dump storage and clean up behavior in Windows 7
http://blogs.msdn.com/b/wer/archive/2009/02/09/kernel-dump-storage-and-clean-up-behavior-in-windows-7.aspx
For the domain administrators, if you want to have the memory.dmp’s analyzed, all you have to do is use Group Policy Preferences to deploy the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
AlwaysKeepMemoryDump (DWORD) 1 (hex)
Good to know.