DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2516512 - Last Review: December 19, 2013 - Revision: 9.1

On This Page

Summary

The Windows Performance Diagnostics tool for Support Diagnostics Platform (SDP) collects information to help you troubleshoot performance problems.

More information

This article describes the information that may be collected when you run the Windows Performance Diagnostics tool for SDP on a computer that is experiencing performance problems.

Information collected

Event Logs - General

Collapse this tableExpand this table
DescriptionFile Name
Event Log – Application – text, csv and evtx formats{Computername}_evt_Application.*
Event Log – System – text, csv and evtx formats{Computername}_evt_System.*

Memory Dumps and related information

Collapse this tableExpand this table
DescriptionFile Name
Information about Machine Memory Dumps, User memory dumps, and memory dump configuration{Computername}_DumpReport.*
Mini-machine memory dumps generated within the past 30 days{Computername}_dmp_*.zip

Hotfixes and updates

Collapse this tableExpand this table
DescriptionFile Name
Installed Updates and Hotfixes{Computername}_Hotfixes.*

Printer and print driver information

Collapse this tableExpand this table
DescriptionFile Name
Information about Print drivers and printers, including print monitors, processors, and print driver file version information{Computername}_PrintInfo.*

Networking basic information

Collapse this tableExpand this table
DescriptionFile Name
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat, and netsh output{Computername}_TcpIp-Info.txt
Basic SMB configuration information based on output of net.exe utility{Computername}_SMB-Info.txt
Networking Diagnostic output using netdiag.exe utility{Computername}_NetDiag.txt
Netsh "int ipv4" and subcommands output{Computername}_TCPIP-Netsh-IPv4.txt
Netsh "int ipv6" and "int 6to4" subcommands output{Computername}_TCPIP-Netsh-IPv6.txt
Netsh "int tcp" subcommands output{Computername}_TCPIP-Netsh-TCP.txt

File version information

Collapse this tableExpand this table
DescriptionFile Name
File version information from %windir%\cluster\*.*{Computername}_sym_Cluster.*
File version information from %windir%\system32\*.dll{Computername}_sym_System32_dll.*
File version information from %windir%\system32\*.exe{Computername}_sym_System32_exe.*
File version information from %windir%\system32\*.sys{Computername}_sym_System32_sys.*
File version information from %windir%\system32\drivers folder{Computername}_sym_Drivers.*
File version information from %windir%\system32\drivers\*.*{Computername}_sym_SysWOW64_sys.*
File version information from {Program Files (x86}}\*.sys{Computername}_sym_ProgramFilesx86_sys.*
File version information from {Program Files}\*.sys{Computername}_sym_ProgramFiles_sys.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{Computername}_sym_MS_Iscsi.*
File version information from all drivers currently running on machine{Computername}_sym_RunningDrivers.*
File version information from all processes currently running on machine{Computername}_sym_Process.*
File version information from print spooler folder %windir%\system32\Spool\*.*{Computername}_sym_PrintSpooler.*

Registry subkeys

Collapse this tableExpand this table
DescriptionFile Name
HKLM\Software\Microsoft\Windows NT\CurrentVersion

HKLM\Software\Microsoft\Windows\CurrentVersion
{Computername}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{Computername}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{Computername}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{Computername}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl

HKLM\System\CurrentControlSet\Control\Session Manager

HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

HKLM\Software\Microsoft\Windows\Windows Error Reporting

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting
{Computername}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce

HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\ Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce

HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit
{Computername}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{Computername}_reg_Print.HIV
HKCU\Software\Policies

HKLM\Software\Policies

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
{Computername}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones
{Computername}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access

HKLM\SYSTEM\CurrentControlSet\Services\TermService

HKLM\SYSTEM\CurrentControlSet\Services\TermDD
{Computername}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb

HKLM\SYSTEM\CurrentControlSet\Services\SMB

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10

HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20
{Computername}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{Computername}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{Computername}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt

HKLM\SOFTWARE\Microsoft\iSCSI Target

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI
{Computername}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev

HKLM\System\CurrentControlSet\Control\iSCSIPrt

HKLM\System\CurrentControlSet\Services\MSiSCSI

HKLM\System\CurrentControlSet\Services\MSDsm

HKLM\System\CurrentControlSet\Services\MPIO

HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}

HKLM\System\CurrentControlSet\Services\Tcpip
{Computername}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{Computername}_reg_Enum.TXT
HKLM\System\CurrentControlSet\services\ClusSvc
HKLM\System\CurrentControlSet\services\CluDisk
{Computername}_reg_ClusSvc.TXT
HKLM\Cluster{Computername}_Cluster.hiv

Storage and disk information

Collapse this tableExpand this table
DescriptionFile Name
Information from machine disk sectors generated by SecInspect.exe utility{Computername}_Secinspect.txt
iSCSI related information generated by iscsicli.exe utility{Computername}_iSCSIInfo.txt
Parsing of Storage related event logs (Events 6 7 9 11 15 50 51 57 and 389) on System log using evparse.exe utility{Computername}_StorageEventLogs.htm
Fibre Channel Information tool (fcinfo) output to obtain SAN resources and configuration information{Computername}_FCInfo.txt
Dispart’s SAN policy information{Computername}_DiskpartSANPolicy.TXT

Devices and drivers

Collapse this tableExpand this table
DescriptionFile Name
Devices and connection information generated by devcon utility{Computername}_Devcon.log
Minifilter drivers enumeration using Fltmc.exe utility{Computername}_Fltmc.TXT
MS-DOS device names using dosdev utility{Computername}_DosDev.txt
Output from Driver Verifier Manager (verifier.exe) utility{Computername}_Verifier.txt
Upper and lower filters Information using fltrfind.exe utility{Computername}_FltrFind.txt
Information about driver signature using driverquery.exe{Computername}_SignedDrivers.txt
iSCSI Information using iscsicli.exe utility{Computername}_iSCSIInfo.txt

Server manager and server roles information

Collapse this tableExpand this table
DescriptionFile Name
Information about server roles installed on a server generated by servermanagercmd.exe{Computername}_ServerManagerCmdQuery.*
Server manager log file located at %windir%\logs\ServerManager.log{Computername}_ServerManager.log
SeverCore OCList output{Computername}_OptionalComponents.txt

Hyper-V role

Collapse this tableExpand this table
DescriptionFile Name
Event Log - Hyper-V related event logs (Microsoft-Windows-Hyper-V*) – Text, csv and evtx formats{Computername}_evt_HyperV*.*
Hyper-V Configuration and Virtual Machine Information{Computername}_HyperV-Info.htm
Hyper-V Virtual Machine Definition files from %ProgramData%\Microsoft\Windows\Hyper-V\Virtual Machines\*.xml{Computername}_{VirtualMachineGUID}.xml

FailoverCluster feature

Collapse this tableExpand this table
DescriptionFile Name
Cluster Logs generated by Get-ClusterLog PowerShell cmdlet{Computername}_Cluster.Log
Cluster MPS Tool (clusmps.exe) output{Computername} _Cluster_MPS_Information.txt
Cluster validation reports files located at \Windows\Cluster\Reports\*.mht{Computername} _*.mht
Cluster reports XML files located at \Windows\Cluster\Reports\*.xml{Computername} _*.xml
Cluster validation log files from \Windows\Cluster\Reports\Validate*.log{Computername}_Validade*.log
Cluster resources properties using PowerShell Get-ClusterResource cmdlet{Computername}_ClusterProperties.txt
Cluster Dependency Report generated by Get-ClusterResourceDependencyReport PowerShell cmdlet{Computername}_DependencyReport.mht
Cluster Shared Volume information – html format{Computername}_CSVInfo.htm
Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet{Computername}_ValidationReport.mht
Cluster MPS Tool (clusmps.exe) output{Computername} _Cluster_MPS_Information.txt
Event Logs - Microsoft-Windows-FailoverClustering* - text, csv and evtx formats{Computername}_evt_FailoverClustering*.*
Cluster Resource Properties from cluster.exe utility{Computername}_Cluster_Properties.txt
Cluster Resources information from cluster.exe utility

{Computername}_Cluster_Resources.txt
Output from ‘Cluster . RES’ command line utility, listing resources and properties{Computername}_Cluster_Res_Properties_All.txt

Best Practices Analyzer output

Collapse this tableExpand this table
DescriptionFile Name
Hyper-V Best Practices Analyzer output in HTML format



Note Update 977238 must be installed to obtain this output
{Computername}_HyperV_BPAInfo.*
Remote Desktop Services Best Practices Analyzer output in HTML format{Computername}_TS_BPAInfo.*

Performance-related information

Collapse this tableExpand this table
DescriptionFile Name
Basic Information about processes, such as memory usage and handle count, and information about Kernel memory utilization, such as Paged Pool and Non-Paged Pool memory{Computername}_ProcessesPerfInfo.htm
Performance Monitor log from common counters from one minute with a sample interval of one second{Computername}_Report.html
{Computername}_*.blg

Virtualization

Collapse this tableExpand this table
DescriptionFile Name
Basic information about virtual environments{Computername}_Virtualization.*

Other

Collapse this tableExpand this table
DescriptionFile Name
Resultant Set of Policy (RSoP) generated by gpresult.exe utility{Computername}_GPResult.*
System Information - MSInfo32 tool output – txt and nfo formats{Computername}_msinfo32.*
Volume Shadow Copy Service (VSS) information{Computername}_VSSAdmin.txt
Boot Configuration Data (BCD) configuration via bcdedit.exe tool output{Computername}_BCDEdit.txt
Operating system Boot options file (Boot.ini){Computername}_boot.ini
Schedule Tasks information (csv and txt) generated by schtasks.exe utility{Computername}_schtasks.*
Information about process and threads using pstat.exe tool{Computername}_PStat.txt
Basic information about Remote Desktop Services from QUERY command line utility (query user, query session and query process){Computername}_TSQuery.txt
SysInternals utility Autoruns output displaying startup components on the system{Computername}_AutoRuns.*
Windows Update log file (from windows folder){Computername}_WindowsUpdate.log
SP Catalog Logging file (Windows\System32\catroot2 \DBErr.txt){Computername}_DBErr.txt

Additional Information

In addition to the collected information that is listed in these tables, this troubleshooter can detect one or more of the following situations:
  • Event 602 in the PrintService/Admin event log (KB2457866)
  • Symantec Endpoint Protection MR1/MR2
  • Unexpected TCP/IP registry settings (KB 967224)
  • Unsupported versions of Windows Vista or of Windows Server 2008
  • Version mismatches of Integration Services
  • Whether cluster groups are online
  • Whether a Cluster Name Object (CNO) exists and is enabled in Active Directory Domain Services
  • Whether the Cluster service is not running or is offline
  • Whether a driver verifier has been enabled for at least one driver
  • Whether Dynamic Memory is enabled on one or more virtual machines that are running any version of Integration Services that is older than the current version
  • Whether EMC Replistor Software is installed on the computer but Hotfix 975759 is not installed
  • Whether HP Port Monitor HPTCPMON is installed
  • Whether HP Print Services "Net Driver HPZ12" or "Pml Driver HPZ12" are installed
  • Whether one or more Advanced Format Disks (512e) are detected on the system
  • Whether one or more virtual machines have virtual hard disks that are located on a disk that uses Advanced Format Drives (512e disks)
  • Whether page heap is enabled against one or more processes
  • Whether a print driver failed to download from a Print Server because of a "Point and Print Restrictions" policy
  • Whether the operating system is currently low on virtual memory
  • Whether the state of one or more cluster nodes is down or is paused
  • Whether any 4K native drives exist on the system
  • Whether any virtual machine that have High CPU utilization exist in the environment
  • Whether Update 2541014 is installed (This update fixes a problem that may cause this computer not to hibernate or not to generate a machine memory dump when a Stop error occurs.)
  • Whether Update 2263829 is installed on computers that are running the Hyper-V role in Windows Server 2008 R2 Service Pack 1
  • Whether Xeon Processor 5500 Series processor erratum is occurring relative to Hyper-V (see KB 975530)
  • Whether Cluster Shared Volumes is in Maintenance mode
  • Whether the installed operating system is evaluation media
  • Kernel Memory Pool allocation tags that display a higher-than-average consumption
  • Whether processes are using a high number of handles
  • Presence of machine memory dumps within the past 30 days
  • Presence of user mode memory dumps within the past 30 days
  • Problems related to machine memory dump configuration
  • Unexpected Shutdown event log entries in the System log within the past 30 days (Events 41 from Microsoft-Windows-Kernel-Power)
  • Machine Memory Dump-related event log entries in the System log within the past 30 days (Events 1001 from Save Dump)
  • Any of the hosted Hyper-V virtual machines from a Hyper-V host that is using more than 80 percent CPU capacity
  • Failure to run the Cluster Validation report on cluster nodes
  • An error detected by the Cluster Validation report that indicates a failure of any cluster node to contact the Service Control Manager (SCM)

References

For more information about the Microsoft Automated Troubleshooting Services and about the Support Diagnostics Platform, click the following article number to see the article in the Microsoft Knowledge Base: 
2598970  (http://support.microsoft.com/kb/2598970/ ) Information about the Microsoft Automated Troubleshooting Services and Support Diagnostic Platform

Applies to
  • Windows Server 2012 Datacenter
  • Windows Server 2012 Standard
  • Windows 8 Pro
  • Windows 8
  • Windows 7 Enterprise
  • Windows 7 Home Basic
  • Windows 7 Home Premium
  • Windows 7 Professional
  • Windows 7 Starter
  • Windows 7 Ultimate
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Foundation
  • Windows Server 2008 R2 Standard
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Business
  • Windows Vista Enterprise
  • Windows Vista Ultimate
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Microsoft Windows Server 2003 Service Pack 2
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
Keywords: 
KB2516512
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support