ADPlus is a tool from Microsoft Product Support Services (PSS) that can troubleshoot any process or application that stops responding (hangs) or fails (crashes). Frequently, you can use ADPlus (ADPlus.vbs) as a replacement tool for the Microsoft Internet Information Server (IIS) Exception Monitor (6.1/7.1) and User Mode Process Dump. These are two separate tools that PSS frequently uses to isolate what causes a process to stop responding (hang) or quit unexpectedly (crash) in a Microsoft Windows DNA environment.

Back to the top

System requirements

ADPlus has the following minimum requirements:

•	Windows NT 4.0 Service Pack 4 or later
•	Windows Scripting Host version 5.6 or later
•	At least 10 megabytes (MB) of free space on the disk or network share where ADPlus will put the output files
•	Microsoft Debugging Tools for Windows installed

Back to the top

New features for ADPlus Version 6.0

ADPlus V6.0 has been completely rewritten. The tool has new switches and new capabilities. You can now configure the tool through an external configuration file. You can view updated information about the new features and switches in the debugger help file (Debugger.chm) that is included in the Microsoft Windows Debuggers package. To obtain the package, visit the following Microsoft Web site:Debugger.chm is located in the same folder as ADPlus.vbs. To locate the documentation for ADPlus, click the Contents tab, and then click through the following items:

•	Using Debugging Tools for Windows
•	Crash Dump Files
•	User-Mode Dump Files
•	Creating a User Mode Dump File
•	ADPlus

You can also find documentation for ADPlus by clicking the Index tab. Type ADPlus in the keyword text box.

Back to the top

What does ADPlus do?

ADPlus is console-based Microsoft Visual Basic script. It automates the Microsoft CDB debugger to produce memory dumps and log files that contain debug output from one or more processes. Each time that you run ADPlus, debugging information (memory dumps and text files that contain debug information) is put in a new, uniquely named folder (such as C:\Temp\Crash_Mode__Date_01-22-2001__Time_09-41-08AM) on the local file system or on a remote network share. Additionally, each file that ADPlus creates has a unique name (such as PID-1708__Inetinfo.exe__Date_01-22-2001__Time_09-41-08AM.log) to avoid overwriting older files with newer ones.

ADPlus works with any user mode process or service such as Internet Information Services (IIS), Microsoft Transaction Server (MTS), or Microsoft COM+ applications.

The following are some of the features of ADPlus:

•	ADPlus uses the latest Microsoft debuggers for improved features, speed, and reliability.
•	When ADPlus is dumping memory for multiple processes, it does so asynchronously so that each process is frozen and dumped at the same time. This method can provide an effective "snapshot" of the whole application at the time that ADPlus was run. You must capture all the processes that compose an application, and all the processes that the application uses at the same time, to capture the state of the application at the time that the problem occurs. This is especially important for applications that make remote procedure calls to other processes.
•	ADPlus has a command-line interface. Because ADPlus does not have a graphical user interface, you can run it in quiet mode (to suppress dialog boxes) from a remote command shell (a command shell that is remoted out by using Remote.exe). In quiet mode, errors appear in the console and are written to the event log. For more information about how to run ADPlus from a remote command shell, see the "Usage Scenarios" section of this article.
•	If you use the -notify switch when ADPlus monitors for crashes, and the Windows Messenger service is started, ADPlus can alert a user or computer of a crash through the Windows Messenger service.
•	When ADPlus monitors a process in crash mode, if a crash occurs, ADPlus sends important information about the type of crash to the event log.
•	ADPlus supports XCOPY deployment. If you install the debuggers package that is included with ADPlus on a test computer, you can copy the folder where the debuggers were installed to another computer. Additionally, ADPlus does not require that you register any custom Component Object Model (COM) components on the system. Because of this, you can use ADPlus on production servers that have a locked-down software configuration. To remove ADPlus, delete the folder where it was installed or copied to.

Back to the top

When should you use ADPlus?

ADPlus is intended to provide Microsoft PSS support professionals with debugging information that they must have to isolate the cause of problems that occur in complex environments.

Use ADPlus to capture debugging information if you are experiencing the following problems:

•	Processes that stop responding.
•	Processes that consume 100 percent CPU on a single processor computer, 50 percent CPU on a dual processor computer, 25 percent CPU on a quad processor computer, and so on.
•	Processes that crash or shut down unexpectedly.

Back to the top

When should you not use ADPlus?

Do not use ADPlus in the following situations:

•	If you must troubleshoot a program or process that quits unexpectedly during startup. You can only use ADPlus for processes that start successfully. To troubleshoot processes that quit unexpectedly during startup, User Mode Process Dump may be a better solution. For more information about User Mode Process Dump, click the following article number to view the article in the Microsoft Knowledge Base: 253066 (http://support.microsoft.com/kb/253066/) OEM Support Tools Phase 3 Service Release 2 availability Alternatively, you can use the latest debuggers to manually debug the process. For more information about the latest debuggers, visit the following Microsoft Web site: http://www.microsoft.com/whdc/devtools/debugging/default.mspx (http://www.microsoft.com/whdc/devtools/debugging/default.mspx)
•	If there is a noticeable effect on performance when you use ADPlus in crash mode. Typically, this is caused by dynamic-link libraries (DLLs) or programs that throw many Microsoft Visual C++ EH exceptions. (These exceptions occur when you use the C++ throw statement or when you use try/catch blocks.) Programs that write a lot of information to the debug output stream can also cause performance to decrease. In the vast majority of cases, ADPlus does not affect performance noticeably when it is running in crash mode.
•	If you are running in a clustering environment certain precautions should be taken when you use ADPlus. For more information, click the following article number to view the article in the Microsoft Knowledge Base: 841673 (http://support.microsoft.com/kb/841673/) A server in a cluster may fail over when you try to create a dump file of the information store using ADPlus or Userdump in Exchange 2000 Server or Exchange Server 2003

Back to the top

Where do you obtain ADPlus?

ADPlus is included with the latest Microsoft Debugging Tools for Windows. To obtain the latest Microsoft Debugging Tools for Windows, visit the following Microsoft Web site:

Back to the top

How does ADPlus work?

ADPlus has two modes of operation:

•	"Hang" mode is used to troubleshoot process hangs, 100 percent CPU utilization, and other problems that do not involve a crash. When you use ADPlus in hang mode, you must wait until the process or processes stop responding before you run the script (unlike crash mode, hang mode is not persistent).
•	"Crash" mode is used to troubleshoot crashes that result in Dr. Watson errors, or any other type of error that causes a program or service to quit unexpectedly. When you use ADPlus in crash mode, you must start ADPlus before the crash occurs. You can configure ADPlus to notify an administrator or a computer of a crash through the -notify switch.

Hang mode

In this mode, ADPlus immediately produces full memory dumps for all the processes that are specified on the command line after the script has completed. Each .dmp file that is created is put in a folder that contains the date/time stamp when ADPlus was run. Each file name contains the process name, the process ID, and the date/time stamp when ADPlus was run. While the process memory is being dumped to a file, the process is frozen. After the memory dump file has been created, the process is resumed by using a noninvasive attach/detach with the CDB debugger.

Usage Tip You can use ADPlus in hang mode instead of Userdump.exe to dump the memory for one or more processes. Additionally, hang mode works inside a Terminal Server session.

Crash mode

In this mode, ADPlus attaches the CDB debugger to all processes that are specified on the command line. ADPlus automatically configures the debugger to monitor for the following types of exceptions:

•	Invalid Handle
•	Illegal Instruction
•	Integer Divide by Zero
•	Floating Point Divide by Zero
•	Integer Overflow
•	Invalid Lock Sequence
•	Access Violation
•	Stack Overflow
•	C++ EH Exception
•	Unknown Exception

You can use ADPlus in crash mode instead of the IIS Exception Monitor or Userdump.exe when you are troubleshooting these types of exceptions. Because crash mode uses an "invasive" attach through the CDB debugger, it does not work inside a Microsoft Windows NT 4.0 or Windows 2000 Terminal Server session. Only hang mode works inside a Terminal Server session on these operating systems because they require the use of a noninvasive attach. For more information about how to invasively and noninvasive attach to a process with the latest debuggers, see the "Using Debugging Tools for Windows: Attaching to a Running Process (User Mode)" section in the debuggers help.

Note Crash mode is supported in a Terminal Server session on Windows XP and Microsoft Windows Server 2003 operating systems.

When ADPlus is running in crash mode, a debugger remains attached to each process that is specified on the command line for the lifetime of that process until a fatal exception is trapped and the process quits unexpectedly, or until a user presses the CTRL+C key combination to detach the debugger from that process. To manually detach the debugger from the process, you must maximize the debugger window, and then press CTRL+C to break into the debugger.

When you press CTRL+C, ADPlus traps this command, starts to list the stacks for all threads to a log file, and then produces a mini memory dump record of the process before it detaches from the debugger. Because crash mode performs an invasive attach, the process is stopped when the debugger is detached. You must restart the process. If it is an MTS or COM+ process, the process is restarted automatically the next time that a call is made to a component in that package.

First chance exceptions

Each type of exception (such as an access violation or a stack overflow) can be raised to a debugger as either a first chance exception or a second chance exception. By definition, a first chance exception is non-fatal unless it is not handled correctly by using an error handler. If this problem occurs, the exception is raised again as a second chance exception (only a debugger can handle these). If no debugger handles a second chance exception, the application quits.

For more information about first and second chance exceptions and the Windows NT SEH (structured exception handling), click the following article number to view the article in the Microsoft Knowledge Base: By default, when ADPlus detects a first chance (non-fatal) exception for all types of exceptions except unknown and EH exceptions, it takes the following actions:

1.	Pauses the process to log the date and time that the exception occurred in the log file for the process that is being monitored.
2.	Logs the thread ID and call stack for the thread that raised the exception in the log file for the process that is being monitored.
3.	Produces a uniquely named mini memory dump record (.dump -u /m) of the process at the time that the exception occurred, and then resumes the process.

Note By default, ADPlus does not produce a unique mini memory dump record for first chance EH and unknown exceptions because these exceptions occur frequently. Typically, such exceptions are handled by error handling code in a process or DLL. Because these are handled exceptions, they do not become second chance (unhandled) exceptions and they do not end the process.

However, you can configure ADPlus to produce unique mini memory dumps for first chance EH and unknown exceptions. To do this, you must use a configuration file to customize ADPlus.

Second chance exceptions

When ADPlus detects a second chance (fatal) exception for all types of exceptions (including EH and unknown exceptions), it takes the following actions:

1.	Pauses the process to log the date and time that the exception occurred in the log file for the process that is being monitored.
2.	Logs the thread ID and call stack for the thread that raised the exception in the log file for the process that is being monitored.
3.	Produces a full memory dump of the process at the time that the fatal exception occurred, and then exits the debugger. This action destroys the process.

Note For Microsoft PSS support professionals to analyze memory dumps, they may have to obtain copies of any custom components or DLLs and their corresponding symbol files. For more information about how to create symbol files for your DLLs, click the following article numbers to view the articles in the Microsoft Knowledge Base: For more information about how to obtain symbols for Microsoft products (necessary for analyzing memory dumps with the debuggers), visit the following Microsoft Web site:

Back to the top

ADPlus command line switches

To use ADPlus, you must specify a series of command line switches or arguments to the script. At a minimum, ADPlus requires two switches: one that specifies the mode of operation, and one that specifies a target process to operate against.

The following are the most frequently used switches. You can also view the complete list of switches by running ADPlus –help, or by viewing the debuggers help file (Debugger.chm).

•	-hang This switch configures ADPlus to run in hang mode. You must use this switch with the -iis, -pn, or -p switches. You cannot use -hang with the -crash switch. Note When ADPlus is running in hang mode, you must start ADPlus after the process stops responding or is consuming a high percentage of the CPU.
•	-crash This switch configures ADPlus to run in crash mode. You must use this switch with the -iis, -pn, or -p switches. You cannot use -crash with the -hang switch. Note When ADPlus is running in crash mode, you must start ADPlus before the process quits unexpectedlys or becomes unstable.
•	-pn process name The -pn switch is used to specify a process name that you want ADPlus to analyze. To specify more than one process, use multiple -pn process name switches. For example: -pn process1.exe -pn process2.exe
•	-p process ID The -p switch is used to specify the process ID (PID) of a process that you want ADPlus to analyze. To specify more than one process, use multiple -p PID switches. For example: -p 1896 -p 1702
•	-scspawning command Unlike the -pn and -p switches, which specifiy processes that are already running to attach the debugger to, the -sc switch defines the application and parameters to be started (or spawned) in the debugger. For example: -sc "c:\windows\system32\notepad.exe
•	-iis The -iis switch is used for debugging server computers that are running Internet Information Server (IIS) 4.0 or later. When you use ADPlus with the -iis switch, ADPlus monitors all the IIS in-process (Inetinfo.exe) and out-of-process (Mtx.exe/Dllhost.exe) applications. You can use the -iis switch with the -pn switch or the -p switch, or you can use it alone to analyze IIS and all running MTS/COM+ applications in either crash mode or hang mode. If you are trying to analyze a server computer running IIS 3.0 or earlier, use the -pn switch and specify Inetinfo.exe as the process to monitor.
•	-notify computer name or user name This switch is only valid when ADPlus is running in crash mode. This switch instructs ADPlus to alert the specified user name or computer name of a crash. When the debugger detaches from the process because of a second chance exception, or when a user presses CTRL+C to stop debugging, a notification is sent to the remote user or computer through the local messenger service. This notification occurs only if the local messenger service is started on the computer that is being debugged.
•	-quiet This switch instructs ADPlus to suppress all modal dialog boxes. This switch is useful if you are running ADPlus from a remote command shell where modal dialog boxes can cause ADPlus to wait indefinitely for a user to click OK. For best results, make sure that this is the first switch that is passed to ADPlus.vbs.
•	-o output directory This switch instructs ADPlus where to put the debug output files. If you use long file names, you must enclose them in double quotation marks. Additionally, you can use a UNC path (\\server\share). If you use a UNC path, ADPlus creates a new folder immediately below the UNC path that you specified. The folder is named for the server where ADPlus is running (for example, \\server\share\Web1 or \\server\share\Web2). This switch is useful if ADPlus is running on multiple computers in a Web farm that are all putting their output on the same network share.

Back to the top

Run ADPlus for the first time

By default, debuggers install to the C:\Program Files\Debugging Tools for Windows folder. To change the installation folder, do a custom install when you install the debuggers, and specify a different folder. Alternatively, if a typical installation was performed, copy the contents of the Program Files\Debugging Tools for Windows folder to a different folder.

To run ADPlus, open a command shell, switch to the folder where the debuggers were installed or copied, and then type ADPlus.vbs.

You may be prompted to change your default script interpreter from Wscript.exe to Cscript.exe. Microsoft strongly recommends that you allow ADPlus to configure CSCript as the default script interpreter.

Syntax

ADPlus uses the following syntax: ADPlus.vbs mode of operation processes to monitor optional switches where mode of operation is -hang, or -crash
where processes to monitor is -iis, -pn process.exe, or -p PID
where optional switches is -notify, -o, or -quiet.

Back to the top

Prepare the server for crash mode debugging

Before you run ADPlus in crash mode, you must prepare the server to obtain the most information from the ADPlus crash mode debugging sessions.

Steps to prepare a Windows 2000-based server for debugging in crash mode

1.	Install the Windows 2000 SP1 or SP2 symbols to the C:\WINNT\Symbols folder on your servers. You can download the symbols from the following Microsoft Web sites: Windows 2000 SP1 http://www.microsoft.com/windows2000/downloads/servicepacks/sp1/debug/default.mspx (http://www.microsoft.com/windows2000/downloads/servicepacks/sp1/debug/default.mspx) Windows 2000 SP2 http://www.microsoft.com/windows2000/downloads/servicepacks/sp2/debug/default.mspx (http://www.microsoft.com/windows2000/downloads/servicepacks/sp2/debug/default.mspx) After you download Sp1sym.exe or Sp2sym.exe, run the file from the designated folder.
2.	When you are prompted, extract the files to a new temporary folder, such as C:\Sp1sym or C:\Sp2sym, or to a drive or folder that has sufficient disk space.
3.	Run C:\Sp1sym\Support\Debug\Symbols\i386\Symbols_spexe or C:\Sp2sym\Support\Debug\Symbols\i386\Symbols_spexe (where C:\Sp1sym or C:\Sp2sym is the folder where you extracted the files in the previous step).
4.	When you prompted with the EULA, click Yes.
5.	When you are prompted for a folder where you can extract the files, click C:\WINNT\Symbols, and then click OK. Notice that a new C:\WINNT\Symbols folder appears. This folder contains various subfolders that have names such as DLL and EXE.
6.	Copy the symbols for your custom DLLs and any post SP1 or SP2 hotfixes to the C:\WINNT\Symbols\Dll folder.
7.	Copy the symbols for your custom .exe files to the C:\WINNT\Symbols\Exe folder. Additionally, you must obtain any .pdb or .dbg files from your developers, and then put these files in the C:\WINNT\Symbols\Dll folder.
8.	Overwrite any .dbg or .pdb files that already exist in the C:\WINNT\Symbols\Dll folder with versions from your hotfixes. Note You can use the latest version of Winzip to open hotfix packages. You can extract the symbols from the \Debug subfolder. The \Debug subfolder is contained in each hotfix self-installer.
9.	Create an _NT_SYMBOL_PATH environment variable, and then set it equal to C:\WINNT\Symbols. This variable can be either a system variable or a user environment variable.

Steps to prepare a Windows NT 4.0-based server for debugging in crash mode

1.	Assume that you are running Windows NT 4.0 Service Pack 6a. Install the Windows NT 4.0 SP6a symbols to the C:\WINNT\Symbols folder on your servers. For more information about Windows NT 4.0 Service Pack 6/6a, click the following article number to view the article in the Microsoft Knowledge Base: 241211 (http://support.microsoft.com/kb/241211/) List of bugs fixed in Windows NT 4.0 Service Pack 6/6a (Part 1) After you download Sp6symi.exe, run it from the designated folder.
2.	When you are prompted, extract the files to the C:\WINNT folder (or substitute the appropriate \WINNT folder if the symbols were not installed to C:\WINNT). Notice that a new C:\WINNT\Symbols folder appears that has various subfolders named DLL, EXE, and others.
3.	Copy the subfolders from the C:\WINNT\Symbols\IIS4 folder to C:\WINNT\Symbols. When you are prompted to overwrite all the files, click Yes.
4.	Copy the symbols for your custom DLLs and any post SP6a hotfixes to the C:\WINNT\Symbols\Dll folder.
5.	Copy the symbols for your custom .exe files to the C:\WINNT\Symbols\Exe folder. Additionally, you must obtain any .pdb or .dbg files from your developers, and then put these files in the C:\WINNT\Symbols\Dll folder.
6.	Overwrite any .dbg or .pdb files that already exist in the C:\WINNT\Symbols\Dll folder with the versions from your hotfixes. Note You can use the latest version of Winzip to open hotfix packages. You can extract the symbols from the \Debug subfolder. This subfolder is included in each hotfix self-installer.
7.	Create an _NT_SYMBOL_PATH environment variable, and then set it equal to C:\WINNT\Symbols. This variable can be either a system variable or a user environment variable.

Although you do not have to download and install symbols on the servers that you are debugging, it is highly recommended. When you download and install symbols on the server, the output that the log files capture is much more useful to Microsoft PSS.

For more information about how to obtain Microsoft Debug Symbols, click the following article number to view the article in the Microsoft Knowledge Base: After you configure your servers, you can run ADPlus in crash mode. This mode is described in the "Typical ADPlus Usage Scenarios" section.

Back to the top

Typical ADPlus usage scenarios

This section describes some of the typical scenarios where you may have to run ADPlus.

Process stops responding or consumes 100 percent CPU utilization

In this scenario, a process may randomly consume 100 percent CPU for sustained periods or indefinitely. Run ADPlus in hang mode to obtain a memory dump of the process or processes that are consuming the CPU after the problem occurs. For example, use one of the following command syntaxes: When you run ADPlus in hang mode during the 100 percent CPU condition, the tool produces memory dump files of the process or processes that you specify on the command line.

Note In certain rare situations, the debugger may not be able to attach to the process after the 100 percent CPU condition or hang has occurred. If you run ADPlus in hang mode after the problem has occurred, the tool may not produce memory dump files. In these scenarios, it may be best to attach the debugger before the problem has occurred. To do this, use one of the following command syntaxes to run ADPlus in crash mode: Then, after the process hangs or is consuming 100 percent CPU utilization, the user can press CTRL+C in the minimized debugger window (or windows) that ADPlus generates so that the debugger can generate a memory dump file for the process (or processes).

Note By default, ADPlus only produces mini memory dump records when the user presses CTRL+C. This setting conserves disk space. In this scenario, it may be useful to configure ADPlus to generate a full memory dump file when the user presses CTRL+C. To do this, use the –CTCF switch. Additionally, it is frequently helpful to capture a performance log file or a system monitor log file for the time period up to and including the 100 percent CPU utilization condition. At a minimum, this log file should capture the following objects at 1 to 5 second intervals:

•	Memory
•	Process
•	Processor
•	System
•	Thread

Process quits unexpectedly

In this scenario, a process may randomly quit (or crash) unexpectedly. Run ADPlus in crash mode to obtain a memory dump file of the process or processes that quit before the problem occurs. For example, use one of the following command syntaxes: Note If you are running ADPlus in crash mode from the local console (instead of from a remote command shell as described in the next section), you must remain logged on to the console for the duration of the debug session.

For example, assume that you start ADPlus in crash mode and you use the -iis switch to monitor IIS. When you log out of the console, the copies of Cdb.exe that are running on the console (and all other running applications) quit . As a result, debugging stops, and the process that is being monitored is ended.

To avoid this issue, you can lock the console session (press the CTRL+ALT+DEL key combination, and then click Lock Computer) or run ADPlus from a remote command shell that you have scheduled to run non-interactively (that is, it does not require an interactive logon).

For more information about how to schedule a remote command shell to run non-interactively, see the "Typical ADPlus Usage Scenarios: Run in Crash Mode Remotely" section.

MTS or COM+ server application quits unexpectedly

Custom Component Object Model (COM) components that run in an MTS or COM+ server application actually run in a surrogate process (Mtx.exe or Dllhost.exe). These surrogate processes have properties and settings that you can configure through the MTS Explorer (for Windows NT 4.0) or through the Component Services Microsoft Management Console (MMC) snap-in (for Windows 2000, Windows XP, and Windows Server 2003).

By default, MTS or COM+ server applications are configured to quit after three minutes of idle time. To make sure that these processes remain running while the debugger is attached and monitoring for exceptions, you must configure them to Leave running when idle.

Additionally, MTS and COM+ implement a failfast. A failfast is a safeguard that is designed to fail (or quit) MTS/COM+ processes that generate unhandled access violations.

By default, the failfast is enabled in MTS or COM+ applications that raise unhandled access violation exceptions. As a result, a failing MTS/COM+ server application cannot raise a second chance access violation exception (that is, it quits after the first chance acess violation). By default, ADPlus is configured to produce only a mini memory dump record when first chance exceptions occur.

To successfully debug MTS/COM+ server applications, followthese steps:

1.	Configure the MTS/COM+ server application to Leave running when idle.
2.	Use the FullOnFirst switch to create full dump files on first chance exceptions.
3.	Run ADPlus in crash mode, and then wait for the application to fail.

Note Because MTS and COM+ shut down a server application, and because the failfast policy prevents the process from raising a second chance exception, you may only be able to obtain a first chance access violation memory dump file.

Run in crash mode remotely

There are many occasions when you must initiate ADPlus in crash mode from a local client computer to monitor a process that quits unexpectedly on one or more remote servers in a server farm. Typically, on Windows 2000, you do this through Windows Terminal Services. However, you cannot debug applications that are running in different window stations on Windows NT 4.0 and Windows 2000. Therefore, ADPlus disables crash mode functionality when it detects that it is running in a Terminal Services session. To resolve this issue, share the remote server by using the Remote.exe utility, create a batch file that starts a command shell on the remote server, and then schedule this batch file to run on the target server by using the AT command. (The AT command causes the command shell to run non-interactively, similiar to a service.) The remote command shell is then connected to a local workstation or client computer that uses the same Remote.exe utility that you used to start the command shell.

To start a remote command shell on a server by using the AT command, follow these steps:

•

On the remote server Assume that the debuggers are installed to C:\Debuggers. Follow these steps: 1. In the C:\Debuggers folder, create a new batch file named Remoteshell.cmd. 2. Add the following line to this batch file: c:\debuggers\remote.exe /s "cmd.exe" remoteshell 3. At the console on the server, or in a Terminal Services session, open a new command shell, and then type the following command: AT 15:00 c:\debuggers\remoteshell.cmd where 15:00 is one minute later than the current time. For example, if the current time is 14:59, type 15:00. 4. Wait for the AT command to run. 5. At the command prompt, type AT with no parameters to verify that the task has run with no errors.

•

On the local client: Install the debuggers on the local client computer or (at a minimum) copy the Remote.exe utility locally. (By default, the utility is installed with the debuggers in the root installation folder.) Assume that the debuggers and the Remote.exe utility are installed to C:\Debuggers. Follow these steps: 1. At a command prompt, switch to the C:\Debuggers folder. 2. Type the following command: remote.exe /c remote server remoteshell where remote server is the name of the remote server. 3. Your local command shell is now connected to the remote command shell that is running on the server, and all commands that you type locally will be carried out on the remote server (the DIR c:\ command lists the contents of drive C on the remote server). 4. In the remote command shell, you can now run ADPlus in crash mode as if you were running it locally from the console. However, you must use the -quiet switch to supress all dialog boxes that ADPlus generates by default. If you do not use the -quiet switch, the remote command shell will stop responding after you run ADPlus, and will not return to a prompt. If this problem occurs, you must quit the remote command shell (Cmd.exe) on the server, and then start a new instance. 5. To send a debug break (CTRL+C) to a process that ADPlus is currently debugging remotely through crash mode, you must use the Breakin.exe utility. By default, Breakin.exe is installed with the debuggers in the root of the debuggers folder. For example, to stop debugging IIS (Inetinfo.exe) that is running with a process ID of 1975, type the following command in the remote command shell: breakin.exe 1975 Alternately, you can use the Kill.exe command (located in the root debuggers folder) to quit any processes that are being debugged.

Back to the top

Additional information and known issues

•	How can you determine if ADPlus has captured information about a crash or if a process that is being monitored in crash mode has quit? There are several ways to determine this: • Use the -notify switch, and verify that the messenger service is started on the server that is being debugged and on the client computer that will receive the notifications. • In a text editor, open the .log file that appears in the output folder for each process, and then scroll to the end of the file. Locate the following text: 0:070> * -------- AutodumpPlus 4.01 finished running at: -------- 0:070> .time Debug session time: Mon Aug 06 15:25:15 2001 System Uptime: 3 days 17:00:34 Process Uptime: 1 days 3:10:38 0:070> * ------------------------------------------------------- • In the output folder, locate any .dmp files that contain the phrase "__2nd_chance". If this phrase appears in the label of a memory dump record, a process has quit unexpectedly. • In the output folder, locate any .dmp files that contain the phrase "__Process_was_shutdown". If this phrase appears in the label of a memory dump record, an administrator quit the process or, if it is an MTS/COM+ application, the process quit because it reached the idle limit. • In the output folder, locate any .dmp files that contain the phrase "__CTRL-C". If this phrase appears in the label of a memory dump record, either a debug break exception was thrown from a DLL that was running in the process or someone pressed CTRL+C from the console (or used Breakin.exe if ADPlus is running remotely) to stop the current debugging session.
•	You must install Windows Scripting Host components on the system for ADPlus to run. To download the Windows Scripting Host, visit the following Microsoft Web site: http://msdn2.microsoft.com/en-us/library/ms950396.aspx (http://msdn2.microsoft.com/en-us/library/ms950396.aspx) Note Windows Scripting Host components may already be installed if you have any of the following Microsoft products installed: • Microsoft Internet Explorer 5 • Microsoft Office 2000 • Microsoft Visual InterDev 6.0 • Microsoft Visual Studio 6.0 • Microsoft Windows NT Option Pack • Microsoft Windows 2000 • Microsoft Windows XP • Microsoft Windows Server 2003 • Microsoft Windows Vista
•	The -iis switch works only if Internet Information Server (IIS) 4.0 or Internet Information Services (IIS) 5.0.x is installed.
•	When you run ADPlus in quiet mode, the tool logs information to the event log.
•	If you use the -o switch, the specified path must not contain more than one nonexistent folder. For example: 1. You specify -o c:\temp1\temp2. However, the C:\Temp1 and \Temp2 folders do not exist. 2. You receive an error message from ADPlus that states that the folders do not exist, and ADPlus will not create them. If you specify only -o c:\temp1, ADPlus creates the C:\Temp1 folder if does not exist, and then puts all output files in that folder. If you want to specify multiple subfolders, and you use the -o switch, verify that all the subfolders exist before you run ADPlus.
•	In COM+, you can configure a server package to start in the debugger on the Advanced tab in the Properties dialog box of the package. If you enable the Launch in Debugger option, ADPlus cannot attach the CDB debugger to a process. By default, only one debugger can be attached to a process at a time.
•	When a remote procedure call (RPC) is made from a process that ADPlus is analyzing in crash mode to another process that has quit (intentionally or unexpectedly), the log file that ADPlus creates for the process that it is analyzing may contain one or more of the following exceptions: Unknown exception - code 80010105 (first chance) Unknown exception - code 800706be (first chance) Unknown exception - code 800706ba (first chance) These exceptions are typical. RPC raises these exceptions when a call is made from a process that is being monitored to a nonexistent or failed process. Additionally, if ADPlus is monitoring Inetinfo.exe in the ADPlus debug log for that process, the following exception may appear in the log: Unknown exception - code 800706bf (first chance) This exception typically appears after IIS makes a call to an out-of-process (high-isolation) Web site that has failed. It may be followed by two instances of the following exception: Unknown exception - code 800706ba (first chance)

Back to the top

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top