This article discusses how to retrieve memory dump files for diagnostic use in cases where protected machines crash after a Datto Windows Agent installation.
- Datto Windows Agent
- Microsoft Windows
There are three types of memory dumps you can choose to run.
- Complete memory dump
A complete memory dump contains the full contents of physical memory at the time of the crash. Complete dumps contain the most information and are the ideal option for troubleshooting crashes.
- Automatic/Kernel memory dump
Automatic dumps do not contain user-mode process information but still provide useful information in a system crash. Automatic dumps are smaller than a complete dump.
- Small memory dump (minidump)
Minidumps are 64 KB in size for x86 systems; 128 KB on x64 systems. Minidumps contain stop code, parameters, loaded device driver list, current process and thread information, and kernel stack information for the thread that caused the system crash. Minidumps can provide some helpful information as to the cause of crashes, but may not be as useful as the more extensive options.
1. Click Start, right-click My Computer, and select Properties. For Windows 8 or Windows 10 machines, from the directory panel on the left, select the File Explorer. Right-click the This PC icon, then click Properties.
2. In System Properties, click Advanced.
Figure 1: System Properties (click to enlarge)
3. Under the Startup and Recovery section, click Settings.
Figure 2: Settings (click to enlarge)
4. The dump file options are in the Write debugging information section.
Figure 3: Memory dump type (click to enlarge)
5. The memory dump file is typically located in %SystemRoot%\MEMORY.DMP. The system root is typically C:\Windows\System32. If you've configured the system for a minidump, the default location folder is %SystemRoot%\Minidump.
Opening Memory Dump Files
Standard text editors will not open .dmp files properly. Download and install the Windows Driver Kit for Windows 10 to open and view dump files.
After installing the Windows Driver Kit (WDK) for Windows 10:
- Open the Start menu
windbg.exeand press Enter.
- Click File and select Open Crash Dump.
- Browse to the .dmp file you wish to analyze
- Click Open.
The file will load with viewable contents.