[SDP 3][a0f578a1-731c-4437-92cf-c246fa98be36] Hyper-V - Windows Server 2008 R2 and Windows Server 2012

Applies to: Windows Server 2012 DatacenterWindows Server 2012 DatacenterWindows Server 2012 Standard More

Summary

The Hyper-V – Windows Server 2008 R2 and Windows Server 2012 troubleshooter for Support Diagnostic Platform collects information and detects problems to help in troubleshooting most problems that are related to the Hyper-V role on a Windows Server 2008 R2-based system.

More Information

This article describes the information that may be collected from a computer when you are running the Hyper-V – Windows Server 2008 R2 and Windows Server 2012 troubleshooter for Support Diagnostic Platform.

Information that is collected

Event logs - General
DescriptionFile name
Event log – Application – text, csv, and evtx formats{Computername}_evt_Application.*
Event Log – System – text, csv, and evtx formats{Computername}_evt_System.*
Memory dump files and related information
DescriptionFile name
Information about Machine Memory Dumps, User memory dumps and memory dump configuration{Computername}_DumpReport.*
Mini machine memory dumps generated from 30 days ago or newer{Computername}_dmp_*.zip
Hotfixes and updates
DescriptionFile Name
Installed Updates/ Hotfixes{Computername}_Hotfixes.*
Printer and print driver information
DescriptionFile Name
Information about Print drivers and printers, including print monitors, processors and print driver file version information{Computername}_PrintInfo.*
Networking basic information
DescriptionFile Name
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat and netsh output{Computername}_TcpIp-Info.txt
Basic SMB configuration information based on output of net.exe utility{Computername}_SMB-Info.txt
Networking Diagnostic output using netdiag.exe utility{Computername}_NetDiag.txt
Netsh ‘int ipv4’ and subcommands output{Computername}_TCPIP-Netsh-IPv4.txt
Netsh ‘int ipv6’ and ‘int 6to4’ subcommands output{Computername}_TCPIP-Netsh-IPv6.txt
Netsh ‘int tcp’ subcommands output{Computername}_TCPIP-Netsh-TCP.txt
File version information
DescriptionFile name
File version information from %windir%\cluster\*.*{Computername}_sym_Cluster.*
File version information from %windir%\system32\*.dll{Computername}_sym_System32_dll.*
File version information from %windir%\system32\*.exe{Computername}_sym_System32_exe.*
File version information from %windir%\system32\*.sys{Computername}_sym_System32_sys.*
File version information from %windir%\system32\drivers folder{Computername}_sym_Drivers.*
File version information from %windir%\system32\drivers\*.*{Computername}_sym_SysWOW64_sys.*
File version information from {Program Files (x86}}\*.sys{Computername}_sym_ProgramFilesx86_sys.*
File version information from {Program Files}\*.sys{Computername}_sym_ProgramFiles_sys.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{Computername}_sym_MS_Iscsi.*
File version information from all drivers that are currently running on the computer{Computername}_sym_RunningDrivers.*
File version information from all processes that are currently running on the computer{Computername}_sym_Process.*
File version information from print spooler folder %windir%\system32\Spool\*.*{Computername}_sym_PrintSpooler.*
Registry keys
DescriptionFile Name
HKLM\Software\Microsoft\Windows NT\CurrentVersion

HKLM\Software\Microsoft\Windows\CurrentVersion		{Computername}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{Computername}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{Computername}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{Computername}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl

HKLM\System\CurrentControlSet\Control\Session Manager

HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

HKLM\Software\Microsoft\Windows\Windows Error Reporting

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting		{Computername}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce

HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\ Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce

HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit		{Computername}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{Computername}_reg_Print.HIV
HKCU\Software\Policies

HKLM\Software\Policies

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies		{Computername}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones		{Computername}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access

HKLM\SYSTEM\CurrentControlSet\Services\TermService

HKLM\SYSTEM\CurrentControlSet\Services\TermDD		{Computername}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb

HKLM\SYSTEM\CurrentControlSet\Services\SMB

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20		{Computername}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{Computername}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{Computername}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt

HKLM\SOFTWARE\Microsoft\iSCSI Target

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI		{Computername}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev

HKLM\System\CurrentControlSet\Control\iSCSIPrt

HKLM\System\CurrentControlSet\Services\MSiSCSI

HKLM\System\CurrentControlSet\Services\MSDsm

HKLM\System\CurrentControlSet\Services\MPIO

HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}

HKLM\System\CurrentControlSet\Services\Tcpip		{Computername}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{Computername}_reg_Enum.TXT
HKLM\System\CurrentControlSet\services\ClusSvc
HKLM\System\CurrentControlSet\services\CluDisk		{Computername}_reg_ClusSvc.TXT
HKLM\Cluster{Computername}_Cluster.hiv
Best practices analyzer
DescriptionFile Name
Best Practice Analyzer – Hyper-V{Computername}_Hyper-V_BPAInfo.*
Storage/disk information
DescriptionFile Name
Information from machine disk sectors generated by SecInspect.exe utility{Computername}_Secinspect.txt
iSCSI related information generated by iscsicli.exe utility{Computername}_iSCSIInfo.txt
Parsing of Storage related event logs (Events 6 7 9 11 15 50 51 57 and 389) on System log using evparse.exe utility{Computername}_StorageEventLogs.htm
Fibre Channel Information tool (fcinfo) output to obtain SAN resources and configuration information{Computername}_FCInfo.txt
Dispart’s SAN policy information{Computername}_DiskpartSANPolicy.TXT
Devices and drivers
DescriptionFile Name
Devices and connection information generated by devcon utility{Computername}_Devcon.log
Minifilter drivers enumeration using Fltmc.exe utility{Computername}_Fltmc.TXT
MS-DOS device names using dosdev utility{Computername}_DosDev.txt
Output from Driver Verifier Manager (verifier.exe) utility{Computername}_Verifier.txt
Upper and lower filters Information using fltrfind.exe utility{Computername}_FltrFind.txt
Information about driver signature using driverquery.exe{Computername}_SignedDrivers.txt
iSCSI Information using iscsicli.exe utility{Computername}_iSCSIInfo.txt
Server manager/roles information
DescriptionFile Name
Information about server roles installed on a server generated by servermanagercmd.exe{Computername}_ServerManagerCmdQuery.*
Server manager log file that is located at %windir%\logs\ServerManager.log{Computername}_ServerManager.log
Hyper-V role
DescriptionFile Name
Event Log - Hyper-V related event logs (Microsoft-Windows-Hyper-V*) – Text, csv and evtx formats{Computername}_evt_HyperV*.*
Hyper-V Configuration and Virtual Machine Information{Computername}_HyperV-Info.htm
Hyper-V Virtual Machine Definition files from %ProgramData%\Microsoft\Windows\Hyper-V\Virtual Machines\*.xml{Computername}_{VirtualMachineGUID}.xml
Hyper-V Best Practice Analyzer output in html format*{Computername}_HyperV_BPAInfo.HTM
Hyper-V Advanced Networking Information{Computername}_Hyper-V-NetworkingInfo.txt
FailoverCluster feature
DescriptionFile Name
Cluster logs that are generated by the Get-ClusterLog Windows PowerShell cmdlet{Computername}_Cluster.Log
Cluster MPS Tool (clusmps.exe) output{Computername} _Cluster_MPS_Information.txt
Cluster validation reports files that are located at \Windows\Cluster\Reports\*.mht{Computername} _*.mht
Cluster reports XML files that are located at \Windows\Cluster\Reports\*.xml{Computername} _*.xml
Cluster validation log files from \Windows\Cluster\Reports\Validate*.log{Computername}_Validade*.log
Cluster resources properties using PowerShell Get-ClusterResource cmdlet{Computername}_ClusterProperties.txt
Cluster Dependency Report generated by Get-ClusterResourceDependencyReport PowerShell cmdlet{Computername}_DependencyReport.mht
Cluster Shared Volume information – html format{Computername}_CSVInfo.htm
Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet{Computername}_ValidationReport.mht
Event Logs - Microsoft-Windows-FailoverClustering* - text, csv and evtx formats{Computername}_evt_FailoverClustering*.*
Other
DescriptionFile Name
System Information - MSInfo32 tool output – txt and nfo formats{Computername}_msinfo32.*


More information

In addition to collecting the files that are listed in this article, this troubleshooter can detect one or more of the following situations:
  • Presence of a machine memory dumps in the past 30 days
  • Presence of a user mode memory dumps in the past 30 days
  • Problems related with machine memory dump configuration
  • Unexpected shutdown event logs on the System log from the past 30 days (Events 41 from Microsoft-Windows-Kernel-Power)
  • Machine Memory Dump-related event logs on the System log from the past 30 days (Events 1001 from Save Dump)
  • Prerelease version of Windows Server 2008 R2
  • Evaluation versions of Windows Server 2008 R2
  • Any of the hosted Hyper-V virtual machines from a Hyper-V host is using more than 80 percent of CPU
  • Cluster service of a FailoverCluster node is not running
  • The state of any of the cluster nodes is "Down"
  • Any of the cluster groups is down
  • A problem in obtaining cluster information
  • Any of the Cluster Shared Volumes is in Maintenance state
  • Any of the Cluster Shared Volumes is in Redirect state
  • A node cannot access any of the Cluster Shared Volumes locally
  • A node cannot access any of the Cluster Shared Volumes through the network
  • An error to run the cluster validation report
  • An error was detected by the cCluster Validation report
  • Cannot contact the Service Control Manager (SCM) of any cluster node
  • Any Hyper-V BPA warnings or errors
This diagnostic package does not run on Windows Server 2008 R2 ServerCore installation option or Hyper-V Server. If you have to obtain data from a ServerCore or Hyper-V Server, you should contact a Microsoft Support Professional. He or she can then send you a specific troubleshooter that can be used to obtain data from these systems remotely.

References

For more information about the diagnostic tool, click the following article number to go to the article in the Microsoft Knowledge Base:
973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2