This article discusses how to retrieve memory dump files for diagnostic use in cases where protected machines crash after a Datto Windows Agent installation.
- Datto Windows Agent
- Microsoft Windows
There are three types of memory dumps you can choose to run.
- Complete memory dump
A complete memory dump contains the full contents of physical memory at the time of the crash. Complete dumps contain the most information and are the ideal option for troubleshooting crashes.
- Automatic/Kernel memory dump
Automatic dumps do not contain user-mode process information but still provide useful information in a system crash. Automatic dumps are smaller than a complete dump.
- Small memory dump (minidump)
Minidumps are 64 KB in size for x86 systems; 128 KB on x64 systems. Minidumps contain stop code, parameters, loaded device driver list, current process and thread information, and kernel stack information for the thread that caused the system crash. Minidumps can provide some helpful information as to the cause of crashes, but may not be as useful as the more extensive options.
1. On your Windows machine, click Start, right-click My Computer, and select Properties. For Windows 8 or Windows 10 machines, navigate to the File Explorer. Right-click the This PC icon, then click Properties.
2. In System Properties, click Advanced system settings.
3. Under the Startup and Recovery section, click Settings.
4. The dump file options are in the Write debugging information section.
5. The memory dump file is typically located in %SystemRoot%\MEMORY.DMP. The system root is typically C:\Windows\System32. If you've configured the system for a minidump, the default location folder is %SystemRoot%\Minidump.