Taking the User-Mode Dumps on Windows 2008 Server, Windows 7

Hi All,


We can use Debug Diagnostics 1.2 on windows 2008 and Windows 7.  Please visit KB http://support.microsoft.com/kb/2580960 for more information.


Also Windows 2008 and Windows 7 has got WER services which can take the User-Mode crash dump. This works very well for x64 versions too.


To configure WER services please visit the below link :


Collecting User-Mode Dumps



Starting with Windows Server 2008 and Windows Vista with Service Pack 1 (SP1), Windows Error Reporting (WER) can be configured so that full user-mode dumps are collected and stored locally after a user-mode application crashes.


For example if my IIS 7 worker process i.e. w3wp.exe is crashing then I need to configure below.


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\w3wp.exe]

"DumpFolder"= REG_EXPAND_SZ: c:\temp




And above registry settings will give you 5 dumps for w3wp.exe if it crashes.


Collecting User-Mode Hang Dumps


For taking hand dumps in Windows 7 and Windows 2008 server, we need to figure the hung process. Open task manager >> figure out the hung process >> right click on the hung process >> click “Create Dump File”.   And dump will be taken on the temp path. The path will be shown in the dialogue box. Press Ctrl + C on the dialogue box and message(path) will be copied to the clipboard.




This applies to x64 versions as well. For advanced users there is always "Debugging tools for Windows"



White Paper Install Debugging Tools for Windows 32-bit Version
Download page for the latest 32-bit packages.
White Paper Install Debugging Tools for Windows 64-bit Versions
Download page for the latest 64-bit packages.



Comments (1)
  1. Balmukund says:

    What about Windows 2012 R2? Any new version of DebugDiag?

Comments are closed.

Skip to main content