I did reg query \\\HKLM\SYSTEM\CurrentControlSet\Control\CrashControl exactly and it says:
ERROR: Invalid key name.
Type "REG QUERY /?" for usage.
I then proceeded to do your other commands. They both said successful, but it never dumped to file and the DebugInfoType got reset back to 0.
oh crap....
sorry try this...
REG QUERY HKLM\SYSTEM\CurrentControlSet\Control\CrashControl
Okie good
Follow the next steps one after another... Each time you type Yes when asked to overwrite......
First set the crash dump to minidump... thats why its 0x3
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v CrashDumpEnabled /t REG_DWORD /d 0x3
Next set the log event
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v LogEvent /t REG_DWORD /d 0x1
Then the Minidump counts
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v MinidumpsCount /t REG_DWORD /d 0x32
Then the Dump file
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v DumpFile /t REG_EXPAND_SZ /d ^%SystemRoot%\MEMORY.DMP
Then the Minidump location
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v MinidumpDir /t REG_EXPAND_SZ /d ^%SystemRoot%\Minidump
Once finished... do the reg query to see of everything is enabled.
REG QUERY HKLM\SYSTEM\CurrentControlSet\Control\CrashControl
The resulting query should look like this.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
AutoReboot REG_DWORD 0x1
CrashDumpEnabled REG_DWORD 0x3
Overwrite REG_DWORD 0x1
LogEvent REG_DWORD 0x1
MinidumpsCount REG_DWORD 0x32
DumpFile REG_EXPAND_SZ %SystemRoot%\MEMORY.DMP
MinidumpDir REG_EXPAND_SZ %SystemRoot%\Minidump
DumpFilters REG_MULTI_SZ dumpfve.sys
I just released you could use the right directional key to copy from the previous command by chance when doing these command. Never knew that before and saved me some time. :)
Results:
I don't think the autoreboot is significant, but what about the drive saying X:\ instead of my drive which is C:\?HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
AutoReboot REG_DWORD 0x0
CrashDumpEnabled REG_DWORD 0x3
Overwrite REG_DWORD 0x1
DumpFilters REG_MULTI_SZ dumpfve.sys
LogEvent REG_DWORD 0x1
MinidumpsCount REG_DWORD 0x32
DumpFile REG_EXPAND_SZ X:\%SystemRoot%\MEMORY.DMP
MinidumpDir REG_EXPAND_SZ X:\%SystemRoot%\Minidump
Aha
Thats the problem... it should never be X or C.... as %SystemRoot% tells windows whatever is drive where windows in installed.
ok repeat only the last two steps again ...
Then the Dump file
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v DumpFile /t REG_EXPAND_SZ /d ^%SystemRoot%\MEMORY.DMP
Then the Minidump location
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v MinidumpDir /t REG_EXPAND_SZ /d ^%SystemRoot%\Minidump
Remember there is a carat ^ .. after the /d.. its important to add this
One question... how are you doing this command i mean is it from the DVD or is it from the command line through F8... sorry i should have asked this before ???
F8 is fine..
Yes please repeat and then do a REG QUERY again
I copied the output wrong, it actually says:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
AutoReboot REG_DWORD 0x0
CrashDumpEnabled REG_DWORD 0x3
Overwrite REG_DWORD 0x1
DumpFilters REG_MULTI_SZ dumpfve.sys
LogEvent REG_DWORD 0x1
MinidumpsCount REG_DWORD 0x32
DumpFile REG_EXPAND_SZ X:\windows\MEMORY.DMP
MinidumpDir REG_EXPAND_SZ X:\windows\Minidump
This is weird... The command should set it to %SystemRoot%..... not sure why it still refers to X ??
Could you repeat the last steps again .... but this time... try to make it specific..
Like
For Dump file
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v DumpFile /t REG_EXPAND_SZ /d ^C:\Windows\MEMORY.DMP
Then the Minidump location
REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl /v MinidumpDir /t REG_EXPAND_SZ /d ^C:\Windows\Minidump
Let me know what the REG QUERY shows after doing this
Quote