[SDP 3][62ec9a58-1f9e-4550-b65c-87827221dd05] FailoverCluster Multinode troubleshooter for Windows Server

Article ID: 2415016 - View products that this article applies to.
Expand all | Collapse all

Summary

The FailoverCluster Multinode – Windows Server troubleshooter for Support Diagnostic Platform collects information to help troubleshoot most FailoverCluster problems.

More information

The FailoverCluster Multinode – Windows Server troubleshooter for Support Diagnostic Platform can be run on any Windows 7-based or Windows Server -based computer that is located in the same domain as the FailoverCluster that you want to obtain data from. If the troubleshooter detects that the local computer is not member of a cluster, it prompts for the name of one of the nodes of the cluster.

The troubleshooter connects to the FailoverCluster service, and displays a of the names of all cluster nodes. You must select one or more computers from which to obtain data. The troubleshooter connects to the selected computer by way of the network, and gets the following information from every selected computer.

Information collected

Event Logs - General
Collapse this tableExpand this table
DescriptionFile Name
Event Log – Application – text, csv and evtx formats{Computername}_evt_Application.*
Event Log – System – text, csv and evtx formats{Computername}_evt_System.*


Memory Dumps and related information
Collapse this tableExpand this table
DescriptionFile Name
Information about Machine Memory Dumps, User memory dumps and memory dump configuration{Computername}_DumpReport.*
Mini machine memory dumps generated from 30 days ago or newer{Computername}_dmp_*.zip


Hotfixes and Updates
Collapse this tableExpand this table
DescriptionFile Name
Installed Updates/ Hotfixes{Computername}_Hotfixes.*


Printer and Print drivers information
Collapse this tableExpand this table
DescriptionFile Name
Information about Print drivers and printers, including print monitors, processors and print driver file version information{Computername}_PrintInfo.*


Networking Basic Information
Collapse this tableExpand this table
DescriptionFile Name
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat and netsh output{Computername}_TcpIp-Info.txt
Basic SMB configuration information based on output of net.exe utility{Computername}_SMB-Info.txt
Networking Diagnostic output using netdiag.exe utility{Computername}_NetDiag.txt
Netsh ‘int ipv4’ and subcommands output{Computername}_TCPIP-Netsh-IPv4.txt
Netsh ‘int ipv6’ and ‘int 6to4’ subcommands output{Computername}_TCPIP-Netsh-IPv6.txt
Netsh ‘int tcp’ subcommands output{Computername}_TCPIP-Netsh-TCP.txt


File Version Information
Collapse this tableExpand this table
DescriptionFile Name
File version information from %windir%\cluster\*.*{Computername}_sym_Cluster.*
File version information from %windir%\system32\*.dll{Computername}_sym_System32_dll.*
File version information from %windir%\system32\*.exe{Computername}_sym_System32_exe.*
File version information from %windir%\system32\*.sys{Computername}_sym_System32_sys.*
File version information from %windir%\system32\drivers folder{Computername}_sym_Drivers.*
File version information from %windir%\system32\drivers\*.*{Computername}_sym_SysWOW64_sys.*
File version information from {Program Files (x86}}\*.sys{Computername}_sym_ProgramFilesx86_sys.*
File version information from {Program Files}\*.sys{Computername}_sym_ProgramFiles_sys.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{Computername}_sym_MS_Iscsi.*
File version information from all drivers currently running on machine{Computername}_sym_RunningDrivers.*
File version information from all processes currently running on machine{Computername}_sym_Process.*
File version information from print spooler folder %windir%\system32\Spool\*.*{Computername}_sym_PrintSpooler.*


Registry Keys
Collapse this tableExpand this table
DescriptionFile Name
HKLM\Software\Microsoft\Windows NT\CurrentVersion

HKLM\Software\Microsoft\Windows\CurrentVersion
{Computername}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{Computername}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{Computername}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{Computername}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl

HKLM\System\CurrentControlSet\Control\Session Manager

HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

HKLM\Software\Microsoft\Windows\Windows Error Reporting

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting
{Computername}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce

HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\ Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce

HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit
{Computername}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{Computername}_reg_Print.HIV
HKCU\Software\Policies

HKLM\Software\Policies

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
{Computername}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones
{Computername}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access

HKLM\SYSTEM\CurrentControlSet\Services\TermService

HKLM\SYSTEM\CurrentControlSet\Services\TermDD
{Computername}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb

HKLM\SYSTEM\CurrentControlSet\Services\SMB

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20
{Computername}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{Computername}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{Computername}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt

HKLM\SOFTWARE\Microsoft\iSCSI Target

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI
{Computername}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev

HKLM\System\CurrentControlSet\Control\iSCSIPrt

HKLM\System\CurrentControlSet\Services\MSiSCSI

HKLM\System\CurrentControlSet\Services\MSDsm

HKLM\System\CurrentControlSet\Services\MPIO

HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}

HKLM\System\CurrentControlSet\Services\Tcpip
{Computername}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{Computername}_reg_Enum.TXT
HKLM\System\CurrentControlSet\services\ClusSvc
HKLM\System\CurrentControlSet\services\CluDisk
{Computername}_reg_ClusSvc.TXT
HKLM\Cluster{Computername}_Cluster.hiv


Deployment Logs
Collapse this tableExpand this table
DescriptionFile Name
Setupact.log from folders:

%windir%

%windir%\Panther

%windir%\Panther\UnattendedGC
{Computername}_Setupact-*.log
Setupapi logs located on %windir%\inf folder{Computername}_SetupApi.app.log

{Computername}_SetupApi.evt.log

{Computername}_SetupApi.offline.log
Setuperr.log located on Windows folder{Computername}_Setuperr.log
Upgrade log – SetupReport.txt from windows\panther folder{Computername}_SetupReport.txt


Servicing Logs
Collapse this tableExpand this table
DescriptionFile Name
Component-Based Servicing Logs located on %windir%\Logs\CBS{Computername}_CBS*.log
DPX Setup Act log located on %windir%\logs\DPX{Computername}_setupact.log"
Pending Operations Queue Exec log located on %windir%\winsxs{Computername}_poqexec.log
Windows Side-by-Side Pending Bad log located on %windir%\ winsxs{Computername}_pending.xml.bad
Windows Side-by-Side Pending log located on %windir%\ winsxs{Computername}_pending.xml


Storage/Disk Information
Collapse this tableExpand this table
DescriptionFile Name
Information from machine disk sectors generated by SecInspect.exe utility{Computername}_Secinspect.txt
iSCSI related information generated by iscsicli.exe utility{Computername}_iSCSIInfo.txt
Parsing of Storage related event logs (Events 6 7 9 11 15 50 51 57 and 389) on System log using evparse.exe utility{Computername}_StorageEventLogs.htm
Fibre Channel Information tool (fcinfo) output to obtain SAN resources and configuration information{Computername}_FCInfo.txt
Dispart’s SAN policy information{Computername}_DiskpartSANPolicy.TXT


Devices and Drivers
Collapse this tableExpand this table
DescriptionFile Name
Devices and connection information generated by devcon utility{Computername}_Devcon.log
Minifilter drivers enumeration using Fltmc.exe utility{Computername}_Fltmc.TXT
MS-DOS device names using dosdev utility{Computername}_DosDev.txt
Output from Driver Verifier Manager (verifier.exe) utility{Computername}_Verifier.txt
Upper and lower filters Information using fltrfind.exe utility{Computername}_FltrFind.txt
Information about driver signature using driverquery.exe{Computername}_SignedDrivers.txt
iSCSI Information using iscsicli.exe utility{Computername}_iSCSIInfo.txt


Server Manager/ Roles Information
Collapse this tableExpand this table
DescriptionFile Name
Information about server roles installed on a server generated by servermanagercmd.exe{Computername}_ServerManagerCmdQuery.*
Server manager log file located at %windir%\logs\ServerManager.log{Computername}_ServerManager.log
SeverCore OCList output{Computername}_OptionalComponents.txt


Hyper-V Role
Collapse this tableExpand this table
DescriptionFile Name
Event Log - Hyper-V related event logs (Microsoft-Windows-Hyper-V*) – Text, csv and evtx formats{Computername}_evt_HyperV*.*
Hyper-V Configuration and Virtual Machine Information{Computername}_HyperV-Info.htm
Hyper-V Virtual Machine Definition files from %ProgramData%\Microsoft\Windows\Hyper-V\Virtual Machines\*.xml{Computername}_{VirtualMachineGUID}.xml
Hyper-V Best Practice Analyzer output in html format*{Computername}_HyperV_BPAInfo.HTM

FailoverCluster Feature
Collapse this tableExpand this table
DescriptionFile Name
Cluster Logs generated by Get-ClusterLog PowerShell cmdlet{Computername}_Cluster.Log
Cluster MPS Tool (clusmps.exe) output{Computername} _Cluster_MPS_Information.txt
Cluster validation reports files located at \Windows\Cluster\Reports\*.mht{Computername} _*.mht
Cluster reports XML files located at \Windows\Cluster\Reports\*.xml{Computername} _*.xml
Cluster validation log files from \Windows\Cluster\Reports\Validate*.log{Computername}_Validade*.log
Cluster resources properties using PowerShell Get-ClusterResource cmdlet{Computername}_ClusterProperties.txt
Cluster Dependency Report generated by Get-ClusterResourceDependencyReport PowerShell cmdlet{Computername}_DependencyReport.mht
Cluster Shared Volume information – html format{Computername}_CSVInfo.htm
Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet{Computername}_ValidationReport.mht
Event Logs - Microsoft-Windows-FailoverClustering* - text, csv and evtx formats{Computername}_evt_FailoverClustering*.*


Best Practice Analyzer output
Collapse this tableExpand this table
DescriptionFile Name
Hyper-V Best Practice Analyzer output in html format



Note: KB 977238 needs to be installed to obtain this output
{Computername}_HyperV_BPAInfo.HTM


Virtualization
Collapse this tableExpand this table
DescriptionFile Name
Basic information about machine virtual environments{Computername}_Virtualization.*


Other
Collapse this tableExpand this table
DescriptionFile Name
Resultant Set of Policy (RSoP) generated by gpresult.exe utility{Computername}_GPResult.*
System Information - MSInfo32 tool output – txt and nfo formats{Computername}_msinfo32.*
Volume Shadow Copy Service (VSS) information{Computername}_VSSAdmin.txt
Boot Configuration Data (BCD) configuration via bcdedit.exe tool output{Computername}_BCDEdit.txt
Schedule Tasks information (csv and txt) generated by schtasks.exe utility{Computername}_schtasks.*
Information about process and threads using pstat.exe tool{Computername}_PStat.txt


Additional Information

In additional to the files collected and listed in this article, this troubleshooter can detect one or more of the following situations:

  • Machine is running on a virtual environment
  • Presence of a machine memory dumps in the past 30 days
  • Presence of a user mode memory dumps in the past 30 days
  • Problems related with machine memory dump configuration
  • Unexpected Shutdown Event Logs on System Log from past 30 days (Events 41 from Microsoft-Windows-Kernel-Power)
    Machine Memory Dump related event logs on System log from past 30 days (Events 1001 from Save Dump)
  • Pre-release version of Windows Server 2008 R2
  • Evaluation versions of Windows Server 2008 R2
    Any of the hosted Hyper-V virtual machines from an Hyper-V host is using more than 80% of CPU
  • Cluster service of a FailoverCluster node is not running
  • The state of any of the cluster nodes is Down
  • Any of the cluster groups is down
  • A problem obtaining cluster information
  • Any of the Cluster Shared Volumes is in Maintenance state
  • Any of the Cluster Shared Volumes is in Redirect state
  • A node is unable to access any of the Cluster Shared Volumes locally
  • A node is unable to access any of the Cluster Shared Volumes via network
  • An error to run the Cluster validation report
  • An error was detected by the Cluster Validation report
  • Unable to contact the Service Control Manager (SCM) of any cluster node

References

For more information about the diagnostic tool, click the following article number to go to the article in the Microsoft Knowledge Base:
973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2415016 - Last Review: August 19, 2013 - Revision: 3.0
Applies to
  • Windows Server 2012 Datacenter
  • Windows Server 2012 Standard
  • Windows 8 Pro
  • Windows 8
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Datacenter without Hyper-V
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Enterprise without Hyper-V
  • Windows Server 2008 R2 for Itanium-Based Systems
  • Windows Server 2008 R2 Foundation
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 R2 Standard without Hyper-V
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Standard
  • Windows 7 Ultimate
  • Windows 7 Professional
  • Windows 7 Home Premium
  • Windows 7 Home Basic
  • Windows Vista Ultimate
  • Windows Vista Home Premium
  • Windows Vista Home Basic
  • Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86)
  • Microsoft Windows Server 2003 R2 Datacenter x64 Edition
  • Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003 R2 Standard x64 Edition
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard x64 Edition
Keywords: 
KB2415016

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com