[SDP 3][a0f578a1-731c-4437-92cf-c246fa98be36] Hyper-V - Windows Server 2008 R2

Article ID: 2518791 - View products that this article applies to.
Expand all | Collapse all

SUMMARY

The Hyper-V – Windows Server 2008 R2 troubleshooter for Support Diagnostic Platform was designed to collect information and detect problems to help troubleshooting most problems related to Hyper-V role on a Windows Server 2008 R2 system.
Back to the top | Give Feedback

MORE INFORMATION

This article describes the information that may be collected from a machine when running the Hyper-V – Windows Server 2008 R2 troubleshooter for Support Diagnostic Platform.

Information Collected

Event Logs - General
Collapse this tableExpand this table
DescriptionFile Name
Event Log – Application  – text, csv and evtx formats{Computername}_evt_Application.*
Event Log – System – text, csv and evtx formats{Computername}_evt_System.*


Memory Dumps and related information
Collapse this tableExpand this table
DescriptionFile Name
Information about Machine Memory Dumps, User memory dumps and memory dump configuration{Computername}_DumpReport.*
Mini machine memory dumps generated from 30 days ago or newer{Computername}_dmp_*.zip


Hotfixes and Updates
Collapse this tableExpand this table
DescriptionFile Name
Installed Updates/ Hotfixes{Computername}_Hotfixes.*


Printer and Print drivers information
Collapse this tableExpand this table
DescriptionFile Name
Information about Print drivers and printers, including print monitors, processors and print driver file version information{Computername}_PrintInfo.*


Networking Basic Information
Collapse this tableExpand this table
DescriptionFile Name
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat and netsh output{Computername}_TcpIp-Info.txt
Basic SMB configuration information based on output of net.exe utility{Computername}_SMB-Info.txt
Networking Diagnostic output using netdiag.exe utility{Computername}_NetDiag.txt
Netsh ‘int ipv4’ and subcommands output{Computername}_TCPIP-Netsh-IPv4.txt
Netsh ‘int ipv6’ and ‘int 6to4’ subcommands output{Computername}_TCPIP-Netsh-IPv6.txt
Netsh ‘int tcp’ subcommands output{Computername}_TCPIP-Netsh-TCP.txt


File Version Information
Collapse this tableExpand this table
DescriptionFile Name
File version information from %windir%\cluster\*.*{Computername}_sym_Cluster.*
File version information from %windir%\system32\*.dll{Computername}_sym_System32_dll.*
File version information from %windir%\system32\*.exe{Computername}_sym_System32_exe.*
File version information from %windir%\system32\*.sys{Computername}_sym_System32_sys.*
File version information from %windir%\system32\drivers folder{Computername}_sym_Drivers.*
File version information from %windir%\system32\drivers\*.*{Computername}_sym_SysWOW64_sys.*
File version information from {Program Files (x86}}\*.sys{Computername}_sym_ProgramFilesx86_sys.*
File version information from {Program Files}\*.sys{Computername}_sym_ProgramFiles_sys.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{Computername}_sym_MS_Iscsi.*
File version information from all drivers currently running on machine{Computername}_sym_RunningDrivers.*
File version information from all processes currently running on machine{Computername}_sym_Process.*
File version information from print spooler folder %windir%\system32\Spool\*.*{Computername}_sym_PrintSpooler.*


Registry Keys
Collapse this tableExpand this table
DescriptionFile Name
HKLM\Software\Microsoft\Windows NT\CurrentVersion

HKLM\Software\Microsoft\Windows\CurrentVersion		{Computername}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{Computername}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{Computername}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{Computername}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl

HKLM\System\CurrentControlSet\Control\Session Manager

HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

HKLM\Software\Microsoft\Windows\Windows Error Reporting

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting		{Computername}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce

HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\ Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce

HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit		{Computername}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{Computername}_reg_Print.HIV
HKCU\Software\Policies

HKLM\Software\Policies

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies		{Computername}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones		{Computername}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access

HKLM\SYSTEM\CurrentControlSet\Services\TermService

HKLM\SYSTEM\CurrentControlSet\Services\TermDD		{Computername}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb

HKLM\SYSTEM\CurrentControlSet\Services\SMB

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20		{Computername}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{Computername}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{Computername}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt

HKLM\SOFTWARE\Microsoft\iSCSI Target

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI		{Computername}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev

HKLM\System\CurrentControlSet\Control\iSCSIPrt

HKLM\System\CurrentControlSet\Services\MSiSCSI

HKLM\System\CurrentControlSet\Services\MSDsm

HKLM\System\CurrentControlSet\Services\MPIO

HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}

HKLM\System\CurrentControlSet\Services\Tcpip		{Computername}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{Computername}_reg_Enum.TXT
HKLM\System\CurrentControlSet\services\ClusSvc
HKLM\System\CurrentControlSet\services\CluDisk		{Computername}_reg_ClusSvc.TXT
HKLM\Cluster{Computername}_Cluster.hiv


Best Practice Analyzer
Collapse this tableExpand this table
DescriptionFile Name
Best Practice Analyzer – Hyper-V{Computername}_Hyper-V_BPAInfo.*


Storage/Disk Information
Collapse this tableExpand this table
DescriptionFile Name
Information from machine disk sectors generated by SecInspect.exe utility{Computername}_Secinspect.txt
iSCSI related information generated by iscsicli.exe utility{Computername}_iSCSIInfo.txt
Parsing of Storage related event logs (Events 6 7 9 11 15 50 51 57 and 389) on System log using evparse.exe utility{Computername}_StorageEventLogs.htm
Fibre Channel Information tool (fcinfo) output to obtain SAN resources and configuration information{Computername}_FCInfo.txt
Dispart’s SAN policy information{Computername}_DiskpartSANPolicy.TXT


Devices and Drivers
Collapse this tableExpand this table
DescriptionFile Name
Devices and connection information generated by devcon utility{Computername}_Devcon.log
Minifilter drivers enumeration using Fltmc.exe utility{Computername}_Fltmc.TXT
MS-DOS device names using dosdev utility{Computername}_DosDev.txt
Output from Driver Verifier Manager (verifier.exe) utility{Computername}_Verifier.txt
Upper and lower filters Information using fltrfind.exe utility{Computername}_FltrFind.txt
Information about driver signature using driverquery.exe{Computername}_SignedDrivers.txt
iSCSI Information using iscsicli.exe utility{Computername}_iSCSIInfo.txt


Server Manager/ Roles Information
Collapse this tableExpand this table
DescriptionFile Name
Information about server roles installed on a server generated by servermanagercmd.exe{Computername}_ServerManagerCmdQuery.*
Server manager log file located at %windir%\logs\ServerManager.log{Computername}_ServerManager.log


Hyper-V Role
Collapse this tableExpand this table
DescriptionFile Name
Event Log - Hyper-V related event logs (Microsoft-Windows-Hyper-V*) – Text, csv and evtx formats{Computername}_evt_HyperV*.*
Hyper-V Configuration and Virtual Machine Information{Computername}_HyperV-Info.htm
Hyper-V Virtual Machine Definition files from %ProgramData%\Microsoft\Windows\Hyper-V\Virtual Machines\*.xml{Computername}_{VirtualMachineGUID}.xml
Hyper-V Best Practice Analyzer output in html format*{Computername}_HyperV_BPAInfo.HTM
Hyper-V Advanced Networking Information{Computername}_Hyper-V-NetworkingInfo.txt

FailoverCluster Feature
Collapse this tableExpand this table
DescriptionFile Name
Cluster Logs generated by Get-ClusterLog PowerShell cmdlet{Computername}_Cluster.Log
Cluster MPS Tool (clusmps.exe) output{Computername} _Cluster_MPS_Information.txt
Cluster validation reports files located at \Windows\Cluster\Reports\*.mht{Computername} _*.mht
Cluster reports XML files located at \Windows\Cluster\Reports\*.xml{Computername} _*.xml
Cluster validation log files from \Windows\Cluster\Reports\Validate*.log{Computername}_Validade*.log
Cluster resources properties using PowerShell Get-ClusterResource cmdlet{Computername}_ClusterProperties.txt
Cluster Dependency Report generated by Get-ClusterResourceDependencyReport PowerShell cmdlet{Computername}_DependencyReport.mht
Cluster Shared Volume information – html format{Computername}_CSVInfo.htm
Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet{Computername}_ValidationReport.mht
Event Logs - Microsoft-Windows-FailoverClustering* - text, csv and evtx formats{Computername}_evt_FailoverClustering*.*


Other
Collapse this tableExpand this table
DescriptionFile Name
System Information - MSInfo32 tool output – txt and nfo formats{Computername}_msinfo32.*


Additional Information

In additional to the files collected and listed above, this troubleshooter can detect one or more of the following situations:

·          Presence of a machine memory dumps in the past 30 days

·          Presence of a user mode memory dumps  in the past 30 days

·          Problems related with machine memory dump configuration

·          Unexpected Shutdown Event Logs on System Log from past 30 days (Events 41 from Microsoft-Windows-Kernel-Power)

·          Machine Memory Dump related event logs on System log from past 30 days (Events 1001 from Save Dump)

·          Pre-release version of Windows Server 2008 R2

·          Evaluation versions of Windows Server 2008 R2

·          Any of the hosted Hyper-V virtual machines from an Hyper-V host is using more than 80% of CPU

·          Cluster service of a FailoverCluster node is not running

·          The state of any of the cluster nodes is Down

·          Any of the cluster groups is down

·          A problem obtaining cluster information

·          Any of the Cluster Shared Volumes is in Maintenance state

·          Any of the Cluster Shared Volumes is in Redirect state

·          A node is unable to access any of the Cluster Shared Volumes locally

·          A node is unable to access any of the Cluster Shared Volumes via network

·          An error to run the Cluster validation report

·          An error was detected by the Cluster Validation report

·          Unable to contact the Service Control Manager (SCM) of any cluster node

·          Any Hyper-V BPA warnings or errors

This diagnostic package will not run on Windows Server 2008 R2 ServerCore installation option or Hyper-V Server. If you need to obtain data from one ServerCore or Hyper-V Server, please contact a Microsoft Support Professional so they can send you a specific troubleshooter that can be used to obtain data from these systems remotely.



References                                                                                                                           

KB 973559 - Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) for Windows 7
http://support.microsoft.com/kb/973559
(http://support.microsoft.com/kb/973559)
Back to the top | Give Feedback
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use
(http://go.microsoft.com/fwlink/?LinkId=151500)
for other considerations.
Back to the top | Give Feedback

Properties

Article ID: 2518791 - Last Review: March 22, 2011 - Revision: 2.0
APPLIES TO
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Foundation
  • Windows Server 2008 R2 Service Pack 1
  • Windows Server 2008 R2 Standard
Keywords: 
KB2518791
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top