Applies to:

Windows 7

Windows 8

For those of you coming from a Windows XP world, you will notice that when a bugcheck (a.k.a. Blue Screen of Death (B.S.O.D.)) occurs, that you don’t get a kernel only memory.dmp file created in %systemroot% (c:\windows).

That is due to change in behavior starting with Windows 7 as described in:

Kernel dump storage and clean up behavior in Windows 7

For the domain administrators, if you want to have the memory.dmp’s analyzed, all you have to do is use Group Policy Preferences to deploy the following registry key:


AlwaysKeepMemoryDump (DWORD) 1 (hex)