Summary
The Support Diagnostics Platform (SDP) manifest file is designed to collect relevant registry data, configuration files, and event log information to help troubleshoot common Forefront Client Security support issues. This article provides details on the data collected by the Forefront Endpoint Protection Troubleshooter.
More Information
This article describes the information that may be collected from a machine when running Forefront Endpoint Protection Troubleshooter.
Information Collected AutoRuns Information
Description |
File Name |
Autoruns information |
{Computername}_Autoruns.htm {Computername}_Autoruns.xml |
Collecting ConfigMgr Log Files
Description |
File Name |
ConfigMgr Agent Logs |
{Computername}_ConfigMgrAgentLogs.CAB |
FEP Support files
Description |
File Name |
FEP2010 Support files |
MPSupportFiles.cab |
Event Log files
Description |
File Name |
Export of the System event log |
{Computername}_evt_System.csv {Computername}_evt_System.evt(x) {Computername}_evt_System.txt |
Export of the Application event log |
{Computername}_evt _Application.csv {Computername}_evt _Application.evt(x) {Computername}_evt_Application.txt |
Export of the Security event log |
{Computername}_evt_Security.csv {Computername}_evt_Security.evt(x) {Computername}_evt_Security.txt |
FEP Information
Description |
File Name |
Program Files Tree |
{Computername}__FEP_PROGRAMFILES_TREE.log |
FEP DefinitionUpdate Cycle |
{Computername}_DefsAnalysis.log |
File Version Information (ChkSym)
Description |
File Name |
CheckSym Output |
{Computername}_sym_ProgramFiles_SYS.CSV {Computername}_sym_ProgramFiles_SYS.TXT {Computername}_sym_ProgramFilesx86_SYS.CSV {Computername}_sym_ProgramFilesx86_SYS.TXT {Computername}_sym_Drivers.CSV {Computername}_sym_Drivers.TXT {Computername}_sym_System32_DLL.CSV {Computername}_sym_System32_DLL.TXT {Computername}_sym_SysWOW64_DLL.CSV {Computername}_sym_SysWOW64_DLL.TXT {Computername}_sym_System32_EXE.CSV {Computername}_sym_System32_EXE.TXT {Computername}_sym_System32_SYS.CSV {Computername}_sym_System32_SYS.TXT {Computername}_sym_SysWOW64_SYS.CSV {Computername}_sym_SysWOW64_SYS.TXT {Computername}_sym_SysWOW64_EXE.CSV {Computername}_sym_SysWOW64_EXE.TXT {Computername}_sym_PrintSpool.CSV {Computername}_sym_PrintSpool.TXT {Computername}_sym_MS_iSCSI.CSV {Computername}_sym_MS_iSCSI.TXT {Computername}_sym_Process.CSV {Computername}_sym_Process.txt {Computername}_sym_RunningDrivers.CSV {Computername}_sym_RunningDrivers.TXT |
Installed Updates/Hotfixes
Description |
File Name |
Installed updates history |
{Computername}_Hotfixes.csv {Computername}_Hotfixes.txt {Computername}_Hotfixes.htm |
Resultant Set of Policy (RSOP)
Description |
File Name |
Policy information |
{Computername}_GPResult.txt {Computername}_GPResult.htm |
System Information
Description |
File Name |
System information |
{Computername}_msinfo32.nfo {Computername}_msinfo32.txt |
System State Information
Description |
File Name |
Scheduled tasks |
{Computername}_schtasks.csv {Computername}_schtasks.txt |
Installed services |
{Computername}_SC_Services_Output.txt |
Running processes |
{Computername}_TaskList.txt |
Environment Variables |
{Computername}_EnvironmentVariables.txt |
Virtualization Information
Description |
File Name |
Virtualization information |
{Computername}_Virtualization.txt {Computername}_Virtualization.htm |