Applies ToForefront Endpoint Protection 2010

Summary

The Support Diagnostics Platform (SDP) manifest file is designed to collect relevant registry data, configuration files, and event log information to help troubleshoot common Forefront Client Security support issues. This article provides details on the data collected by the Forefront Endpoint Protection Troubleshooter.

More Information

This article describes the information that may be collected from a machine when running Forefront Endpoint Protection Troubleshooter.Information CollectedAutoRuns Information

Description

File Name

Autoruns information

{Computername}_Autoruns.htm{Computername}_Autoruns.xml

Collecting ConfigMgr Log Files

Description

File Name

ConfigMgr Agent Logs

{Computername}_ConfigMgrAgentLogs.CAB

FEP Support files

Description

File Name

FEP2010 Support files

MPSupportFiles.cab

Event Log files

Description

File Name

Export of the System event log

{Computername}_evt_System.csv{Computername}_evt_System.evt(x){Computername}_evt_System.txt

Export of the Application event log

{Computername}_evt _Application.csv{Computername}_evt _Application.evt(x){Computername}_evt_Application.txt

Export of the Security event log

{Computername}_evt_Security.csv{Computername}_evt_Security.evt(x){Computername}_evt_Security.txt

FEP Information

Description

File Name

Program Files Tree

{Computername}__FEP_PROGRAMFILES_TREE.log

FEP DefinitionUpdate Cycle

{Computername}_DefsAnalysis.log

File Version Information (ChkSym)

Description

File Name

CheckSym Output

{Computername}_sym_ProgramFiles_SYS.CSV{Computername}_sym_ProgramFiles_SYS.TXT{Computername}_sym_ProgramFilesx86_SYS.CSV{Computername}_sym_ProgramFilesx86_SYS.TXT{Computername}_sym_Drivers.CSV{Computername}_sym_Drivers.TXT{Computername}_sym_System32_DLL.CSV{Computername}_sym_System32_DLL.TXT{Computername}_sym_SysWOW64_DLL.CSV{Computername}_sym_SysWOW64_DLL.TXT{Computername}_sym_System32_EXE.CSV{Computername}_sym_System32_EXE.TXT{Computername}_sym_System32_SYS.CSV{Computername}_sym_System32_SYS.TXT{Computername}_sym_SysWOW64_SYS.CSV{Computername}_sym_SysWOW64_SYS.TXT{Computername}_sym_SysWOW64_EXE.CSV{Computername}_sym_SysWOW64_EXE.TXT{Computername}_sym_PrintSpool.CSV{Computername}_sym_PrintSpool.TXT{Computername}_sym_MS_iSCSI.CSV{Computername}_sym_MS_iSCSI.TXT{Computername}_sym_Process.CSV{Computername}_sym_Process.txt{Computername}_sym_RunningDrivers.CSV{Computername}_sym_RunningDrivers.TXT

Installed Updates/Hotfixes

Description

File Name

Installed updates history

{Computername}_Hotfixes.csv{Computername}_Hotfixes.txt{Computername}_Hotfixes.htm

Resultant Set of Policy (RSOP)

Description

File Name

Policy information

{Computername}_GPResult.txt{Computername}_GPResult.htm

System Information

Description

File Name

System information

{Computername}_msinfo32.nfo{Computername}_msinfo32.txt

System State Information

Description

File Name

Scheduled tasks

{Computername}_schtasks.csv{Computername}_schtasks.txt

Installed services

{Computername}_SC_Services_Output.txt

Running processes

{Computername}_TaskList.txt

Environment Variables

{Computername}_EnvironmentVariables.txt

Virtualization Information

Description

File Name

Virtualization information

{Computername}_Virtualization.txt{Computername}_Virtualization.htm

ReferencesKB 973559 - Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) for Windows 7http://support.microsoft.com/kb/973559

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.