Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. [SDP 3][a0f578a1-731c-4437-92cf-c246fa98be36] Hyper-V - Windows Server 2008 R2 and Windows Server 2012

[SDP 3][a0f578a1-731c-4437-92cf-c246fa98be36] Hyper-V - Windows Server 2008 R2 and Windows Server 2012

View products that this article applies to.

Summary

The Hyper-V – Windows Server 2008 R2 and Windows Server 2012 troubleshooter for Support Diagnostic Platform collects information and detects problems to help in troubleshooting most problems that are related to the Hyper-V role on a Windows Server 2008 R2-based system.

↑ Back to the top

More Information

This article describes the information that may be collected from a computer when you are running the Hyper-V – Windows Server 2008 R2 and Windows Server 2012 troubleshooter for Support Diagnostic Platform.

Information that is collected

Event logs - General
DescriptionFile name
Event log – Application – text, csv, and evtx formats{Computername}_evt_Application.*
Event Log – System – text, csv, and evtx formats{Computername}_evt_System.*
Memory dump files and related information
DescriptionFile name
Information about Machine Memory Dumps, User memory dumps and memory dump configuration{Computername}_DumpReport.*
Mini machine memory dumps generated from 30 days ago or newer{Computername}_dmp_*.zip
Hotfixes and updates
DescriptionFile Name
Installed Updates/ Hotfixes{Computername}_Hotfixes.*
Printer and print driver information
DescriptionFile Name
Information about Print drivers and printers, including print monitors, processors and print driver file version information{Computername}_PrintInfo.*
Networking basic information
DescriptionFile Name
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat and netsh output{Computername}_TcpIp-Info.txt
Basic SMB configuration information based on output of net.exe utility{Computername}_SMB-Info.txt
Networking Diagnostic output using netdiag.exe utility{Computername}_NetDiag.txt
Netsh ‘int ipv4’ and subcommands output{Computername}_TCPIP-Netsh-IPv4.txt
Netsh ‘int ipv6’ and ‘int 6to4’ subcommands output{Computername}_TCPIP-Netsh-IPv6.txt
Netsh ‘int tcp’ subcommands output{Computername}_TCPIP-Netsh-TCP.txt
File version information
DescriptionFile name
File version information from %windir%\cluster\*.*{Computername}_sym_Cluster.*
File version information from %windir%\system32\*.dll{Computername}_sym_System32_dll.*
File version information from %windir%\system32\*.exe{Computername}_sym_System32_exe.*
File version information from %windir%\system32\*.sys{Computername}_sym_System32_sys.*
File version information from %windir%\system32\drivers folder{Computername}_sym_Drivers.*
File version information from %windir%\system32\drivers\*.*{Computername}_sym_SysWOW64_sys.*
File version information from {Program Files (x86}}\*.sys{Computername}_sym_ProgramFilesx86_sys.*
File version information from {Program Files}\*.sys{Computername}_sym_ProgramFiles_sys.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{Computername}_sym_MS_Iscsi.*
File version information from all drivers that are currently running on the computer{Computername}_sym_RunningDrivers.*
File version information from all processes that are currently running on the computer{Computername}_sym_Process.*
File version information from print spooler folder %windir%\system32\Spool\*.*{Computername}_sym_PrintSpooler.*
Registry keys
DescriptionFile Name
HKLM\Software\Microsoft\Windows NT\CurrentVersion

HKLM\Software\Microsoft\Windows\CurrentVersion		{Computername}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{Computername}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{Computername}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{Computername}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl

HKLM\System\CurrentControlSet\Control\Session Manager

HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

HKLM\Software\Microsoft\Windows\Windows Error Reporting

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting		{Computername}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce

HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\ Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce

HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit		{Computername}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{Computername}_reg_Print.HIV
HKCU\Software\Policies

HKLM\Software\Policies

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies		{Computername}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones		{Computername}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access

HKLM\SYSTEM\CurrentControlSet\Services\TermService

HKLM\SYSTEM\CurrentControlSet\Services\TermDD		{Computername}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb

HKLM\SYSTEM\CurrentControlSet\Services\SMB

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20		{Computername}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{Computername}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{Computername}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt

HKLM\SOFTWARE\Microsoft\iSCSI Target

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI		{Computername}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev

HKLM\System\CurrentControlSet\Control\iSCSIPrt

HKLM\System\CurrentControlSet\Services\MSiSCSI

HKLM\System\CurrentControlSet\Services\MSDsm

HKLM\System\CurrentControlSet\Services\MPIO

HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}

HKLM\System\CurrentControlSet\Services\Tcpip		{Computername}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{Computername}_reg_Enum.TXT
HKLM\System\CurrentControlSet\services\ClusSvc
HKLM\System\CurrentControlSet\services\CluDisk		{Computername}_reg_ClusSvc.TXT
HKLM\Cluster{Computername}_Cluster.hiv
Best practices analyzer
DescriptionFile Name
Best Practice Analyzer – Hyper-V{Computername}_Hyper-V_BPAInfo.*
Storage/disk information
DescriptionFile Name
Information from machine disk sectors generated by SecInspect.exe utility{Computername}_Secinspect.txt
iSCSI related information generated by iscsicli.exe utility{Computername}_iSCSIInfo.txt
Parsing of Storage related event logs (Events 6 7 9 11 15 50 51 57 and 389) on System log using evparse.exe utility{Computername}_StorageEventLogs.htm
Fibre Channel Information tool (fcinfo) output to obtain SAN resources and configuration information{Computername}_FCInfo.txt
Dispart’s SAN policy information{Computername}_DiskpartSANPolicy.TXT
Devices and drivers
DescriptionFile Name
Devices and connection information generated by devcon utility{Computername}_Devcon.log
Minifilter drivers enumeration using Fltmc.exe utility{Computername}_Fltmc.TXT
MS-DOS device names using dosdev utility{Computername}_DosDev.txt
Output from Driver Verifier Manager (verifier.exe) utility{Computername}_Verifier.txt
Upper and lower filters Information using fltrfind.exe utility{Computername}_FltrFind.txt
Information about driver signature using driverquery.exe{Computername}_SignedDrivers.txt
iSCSI Information using iscsicli.exe utility{Computername}_iSCSIInfo.txt
Server manager/roles information
DescriptionFile Name
Information about server roles installed on a server generated by servermanagercmd.exe{Computername}_ServerManagerCmdQuery.*
Server manager log file that is located at %windir%\logs\ServerManager.log{Computername}_ServerManager.log
Hyper-V role
DescriptionFile Name
Event Log - Hyper-V related event logs (Microsoft-Windows-Hyper-V*) – Text, csv and evtx formats{Computername}_evt_HyperV*.*
Hyper-V Configuration and Virtual Machine Information{Computername}_HyperV-Info.htm
Hyper-V Virtual Machine Definition files from %ProgramData%\Microsoft\Windows\Hyper-V\Virtual Machines\*.xml{Computername}_{VirtualMachineGUID}.xml
Hyper-V Best Practice Analyzer output in html format*{Computername}_HyperV_BPAInfo.HTM
Hyper-V Advanced Networking Information{Computername}_Hyper-V-NetworkingInfo.txt
FailoverCluster feature
DescriptionFile Name
Cluster logs that are generated by the Get-ClusterLog Windows PowerShell cmdlet{Computername}_Cluster.Log
Cluster MPS Tool (clusmps.exe) output{Computername} _Cluster_MPS_Information.txt
Cluster validation reports files that are located at \Windows\Cluster\Reports\*.mht{Computername} _*.mht
Cluster reports XML files that are located at \Windows\Cluster\Reports\*.xml{Computername} _*.xml
Cluster validation log files from \Windows\Cluster\Reports\Validate*.log{Computername}_Validade*.log
Cluster resources properties using PowerShell Get-ClusterResource cmdlet{Computername}_ClusterProperties.txt
Cluster Dependency Report generated by Get-ClusterResourceDependencyReport PowerShell cmdlet{Computername}_DependencyReport.mht
Cluster Shared Volume information – html format{Computername}_CSVInfo.htm
Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet{Computername}_ValidationReport.mht
Event Logs - Microsoft-Windows-FailoverClustering* - text, csv and evtx formats{Computername}_evt_FailoverClustering*.*
Other
DescriptionFile Name
System Information - MSInfo32 tool output – txt and nfo formats{Computername}_msinfo32.*


More information

In addition to collecting the files that are listed in this article, this troubleshooter can detect one or more of the following situations:
  • Presence of a machine memory dumps in the past 30 days
  • Presence of a user mode memory dumps in the past 30 days
  • Problems related with machine memory dump configuration
  • Unexpected shutdown event logs on the System log from the past 30 days (Events 41 from Microsoft-Windows-Kernel-Power)
  • Machine Memory Dump-related event logs on the System log from the past 30 days (Events 1001 from Save Dump)
  • Prerelease version of Windows Server 2008 R2
  • Evaluation versions of Windows Server 2008 R2
  • Any of the hosted Hyper-V virtual machines from a Hyper-V host is using more than 80 percent of CPU
  • Cluster service of a FailoverCluster node is not running
  • The state of any of the cluster nodes is "Down"
  • Any of the cluster groups is down
  • A problem in obtaining cluster information
  • Any of the Cluster Shared Volumes is in Maintenance state
  • Any of the Cluster Shared Volumes is in Redirect state
  • A node cannot access any of the Cluster Shared Volumes locally
  • A node cannot access any of the Cluster Shared Volumes through the network
  • An error to run the cluster validation report
  • An error was detected by the cCluster Validation report
  • Cannot contact the Service Control Manager (SCM) of any cluster node
  • Any Hyper-V BPA warnings or errors
This diagnostic package does not run on Windows Server 2008 R2 ServerCore installation option or Hyper-V Server. If you have to obtain data from a ServerCore or Hyper-V Server, you should contact a Microsoft Support Professional. He or she can then send you a specific troubleshooter that can be used to obtain data from these systems remotely.

↑ Back to the top

References

For more information about the diagnostic tool, click the following article number to go to the article in the Microsoft Knowledge Base:
973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2

↑ Back to the top

Keywords: kb

↑ Back to the top

Article Info
Article ID : 2518791
Revision : 1
Created on : 1/7/2017
Published on : 12/19/2013
Exists online : False
Views : 566