DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2547207 - Last Review: June 11, 2013 - Revision: 3.0

Summary

This article describes the information that may be collected from a computer when running Internet Explorer Diagnostics for Windows Client and Server as well as a descriptions of the Interactive troubleshooting tasks performed.

When first launching the Internet Explorer Data collector, the user will select either:

Run Internet Explorer Data Collector
Or
Run Internet Explorer Troubleshooting Tasks

More information

When selecting the Data collector option the following information is collected:

Operating System


Machine Name:
OS Name:
Last Reboot/Uptime:
AntiMalware:
User Account Control:
Username:

Computer System
Computer Model:
Processor(s):
Machine Domain:
Role:
Environment Variables
Description

Collapse this tableExpand this table
Elevated User:{Computername}_EnvironmentVariables_MSDT.txt
Target User:{Computername}_EnvironmentVariables_{Username}.txt

Event Logs
Description

Collapse this tableExpand this table
Filtered Event Logs (.csv):{Computername}_ApplicationLog.csv
Filtered Event Logs (.csv):{Computername}_SystemLog.csv

Group Policy and IEAK
Description

Collapse this tableExpand this table
IEAK Logs (.zip):{Computername}_{Username}_IEAK_Brand.zip
HKU:{Computername}_{Username}_HKU_Policies.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Policies.TXT
HKLM:{Computername}_reg_HKLM_Policies.TXT
HKU:{Computername}_{Username}_HKU_GPHistory.TXT
HKLM:{Computername}_reg_HKLM_GPHistory.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow3264Node_GPHistory.TXT
HKLM:{Computername}_reg_HKLM_GPExtensions.TXT
HKLM:{Computername}_reg_HKLM_CurrentVersion_Polcies.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow3264Node_CurrentVersion_Polcies.TXT
SysVol Package:{Computername}_{Username}_IE_GP_SysVol.zip
SysVol Log:{Computername}_{Username}_IE_GP_SysVol.txt
GP User (.txt):{Computername}_GPResult_User_{Username}.txt
GP User (.htm):{Computername}_GPResult_User_{Username}.htm
GP Computer (.txt):{Computername}_GPResult_Computer.txt
GP Computer (.htm):{Computername}_GPResult_Computer.htm

Hardware:DXDiag

Description

Collapse this tableExpand this table
DXDiag:{Computername}_DXDiag.txt

IEDiag
Description

Collapse this tableExpand this table
IEDiagcmd:{Computername}_IEDiag.cab
E Setup Log
Description

Collapse this tableExpand this table
IE Setup Log (.log):{Computername}_IE9_main.log

Installed updates/hotfixes

Description

Collapse this tableExpand this table
Update/Hotfix history:{Computername}_Hotfixes.CSV
Update/Hotfix history:{Computername}_Hotfixes.htm
Update/Hotfix history:{Computername}_Hotfixes.TXT

Internet Explorer Core
Description

Collapse this tableExpand this table
HKU:{Computername}_{Username}_HKU_InternetExplorer.txt
HKU:{Computername}_{Username}_HKU_InternetSettings.txt
HKU:{Computername}_{Username}_HKU_FTP.txt
HKU:{Computername}_{Username}_HKU_FeatureControl.
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_InternetExplorer.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_InternetSettings.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_FeatureControl.TXT
HKLM:{Computername}_reg_HKLM_InternetSettings.TXT
HKLM:{Computername}_reg_HKLM_FeatureControl.TXT

Internet Explorer File Versions

Description

Collapse this tableExpand this table
Version Info:{Computername}_IE_File_Version_Info.txt

Internet Explorer Zones

Description
Collapse this tableExpand this table
HKU:{Computername}_{Username}_HKU_Zones_ZoneMap.txt
HKU:{Computername}_{Username}_HKU_Zones_0_YourComputer.txt
HKU:{Computername}_{Username}_HKU_Zones_1_LocalIntranet.txt
HKU:{Computername}_{Username}_HKU_Zones_2_TrustedSites.txt
HKU:{Computername}_{Username}_HKU_Zones_3_Internet.txt
HKU:{Computername}_{Username}_HKU_Zones_4_RestrictedSites.txt
HKU:{Computername}_{Username}_HKU_LockedDown_Zones_0_YourComputer.txt
HKU:{Computername}_{Username}_HKU_LockedDown_Zones_1_LocalIntranet.txt
HKU:{Computername}_{Username}_HKU_LockedDown_Zones_2_TrustedSites.txt
HKU:{Computername}_{Username}_HKU_LockedDown_Zones_3_Internet.txt
HKU:{Computername}_{Username}_HKU_LockedDown_Zones_4_RestrictedSites.txt
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Zones_ZoneMap.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Zones_0_YourComputer.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Zones_1_LocalIntranet.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Zones_2_TrustedSites.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Zones_3_Internet.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_Zones_4_RestrictedSites.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_LockedDown_Zones_0_YourComputer.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_LockedDown_Zones_1_LocalIntranet.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_LockedDown_Zones_2_TrustedSites.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_LockedDown_Zones_3_Internet.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_LockedDown_Zones_4_RestrictedSites.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_TemplatePolicies_High.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_TemplatePolicies_Low.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_TemplatePolicies_MedHigh.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_TemplatePolicies_Medium.TXT
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_TemplatePolicies_MedLow.TXT
HKLM:{Computername}_reg_HKLM_Zones_ZoneMap.TXT
HKLM:{Computername}_reg_HKLM_Zones_0_YourComputer.TXT
HKLM:{Computername}_reg_HKLM_Zones_1_LocalIntranet.TXT
HKLM:{Computername}_reg_HKLM_Zones_2_TrustedSites.TXT
HKLM:{Computername}_reg_HKLM_Zones_3_Internet.TXT
HKLM:{Computername}_reg_HKLM_Zones_4_RestrictedSites.TXT
HKLM:{Computername}_reg_HKLM_LockedDown_Zones_0_YourComputer.TXT
HKLM:{Computername}_reg_HKLM_LockedDown_Zones_1_LocalIntranet.TXT
HKLM:{Computername}_reg_HKLM_LockedDown_Zones_2_TrustedSites.TXT
HKLM:{Computername}_reg_HKLM_LockedDown_Zones_3_Internet.TXT
HKLM:{Computername}_reg_HKLM_LockedDown_Zones_4_RestrictedSites.TXT
HKLM:{Computername}_reg_HKLM_TemplatePolicies_High.TXT
HKLM:{Computername}_reg_HKLM_TemplatePolicies_Low.TXT
HKLM:{Computername}_reg_HKLM_TemplatePolicies_MedHigh.TXT
HKLM:{Computername}_reg_HKLM_TemplatePolicies_Medium.TXT
HKLM:{Computername}_reg_HKLM_TemplatePolicies_MedLow.TXT

Networking Information
Description
Collapse this tableExpand this table
Host File:{Computername}_hosts
TCP/IP Basic Information:{Computername}_TcpIp-Info.txt
SMB Basic Information:{Computername}_SMB-Info.txt


Operating System Registry

Description
Collapse this tableExpand this table
HKU:{Computername}_{Username}_HKU_ActiveSetup_All.txt
HKU Wow64:{Computername}_{Username}_HKU_ActiveSetup_ALL_Wow6432Node.txt
HKU:{Computername}_{Username}_HKU_Wintrust.txt
HKU:{Computername}_{Username}_HKU_Ext_Settings.txt
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_ActiveSetup_All.TXT
HKLM:{Computername}_reg_HKLM_Wow6432Node_ActiveX_Compatibility.TXT
HKLM:{Computername}_reg_HKLM_ActiveSetup_All.TXT
HKLM:{Computername}_reg_HKLM_ActiveX_Compatibility.TXT
HKLM:{Computername}_reg_HKLM_Wow6432Node_Classes_Protocols.TXT
HKLM:{Computername}_reg_HKLM_Wow6432Node_Code_Store_Database.TXT
HKLM:{Computername}_reg_HKLM_Wow6432Node_Ext_PreApproved.TXT
HKLM:{Computername}_reg_HKLM_Classes_Mime_Database_Content_Type.TXT
HKLM:{Computername}_reg_HKLM_Classes_Protocols.TXT
HKLM:{Computername}_reg_HKLM_SecurityProviders.TXT
HKLM:{Computername}_reg_HKLM_AEDebug.TXT
HKLM:{Computername}_reg_HKLM_Image_File_Execution_Options.TXT
HKLM:{Computername}_reg_HKLM_Fips_Algorithm_Policy.TXT
HKLM:{Computername}_reg_HKLM_KERB_MaxTokenSize.TXT
HKLM:{Computername}_reg_HKLM_SSL_Ciphers.TXT
HKLM:{Computername}_reg_HKLM_Code_Store_Database.TXT
HKLM:{Computername}_reg_HKLM_Ext_PreApproved.TXT

REG Export
Description
Collapse this tableExpand this table
HKU:{Computername}_{Username}_HKU_Internet_Explorer.REG.txt
HKU:{Computername}_{Username}_HKU_Internet_Settings.REG.txt
HKU:{Computername}_{Username}_HKU_Policies.REG.txt
HKLM:{Computername}_{Username}_HKU_Classes.REG.txt
HKLM:{Computername}_HKLM_Internet_Explorer.REG.txt
HKLM:{Computername}_HKLM_Internet_Settings.REG.txt
HKLM:{Computername}_HKLM_Policies.REG.txt
HKLM Wow64:{Computername}_HKLM_Wow6432Node_Internet_Explorer.REG.txt
HKLM Wow64:{Computername}_HKLM_Wow6432Node_Internet_Settings.REG.txt
HKLM Wow64:{Computername}_HKLM_Wow6432Node_Policies.REG.txt
HKLM Wow64:{Computername}_HKLM_Wow6432Node_Classes.REG.txt


Registry - IEAK
Description
Collapse this tableExpand this table
HKLM Wow64:{Computername}_reg_HKLM_Wow6432Node_IEAK.TXT

Windows Setup API Logs
Description
Collapse this tableExpand this table
Windows Setup API Log:{Computername}_SetupAPI.app.Log

Windows update log
Description
Collapse this tableExpand this table
Windows Update Log File:{Computername}_WindowsUpdate.log


When the user selects the troubleshooting tasks option the following tasks are available:


Strace

Description 
    This task will install STRACE to collect the HTTP HTTPS traffic between this client and a webserver. You will be prompted to uninstall STRACE upon completion of the task.
During this collection, the Temporary Internet Files Cache will be cleared to ensure the collection contains all request between the webserver and this client.
    STRACE is a socket/SSL tracer that is based on the "detours" utility. The tool has been specificaly designed to generate LOG for Internet Explorer but it can be used with many other applications.
    Using STRACE with Internet Explorer is equivalent to use a (non full) debug build of WININET.DLL to generate a WININET LOG. The STRACE LOG contains clear text HTTP traffic (with socket information) and encrypted/decrypted SSL data.
    From the STRACE LOG, you can "replay" a full navigation scenario using the HTTPREPLAY tool. This can be useful to reproduce a problem or browse web sites offline...
    Download location
    http://www.microsoft.com/en-us/download/details.aspx?id=7643

Data collected:

Strace network logs

Description 
Collapse this tableExpand this table
Strace Logs (.strace):STRACE_IEXPLORE_PID_{ProcessID}_{date}_{time}.STRACE
ProcDump a process

Description 
This task will allow you to collect process dump of Internet Explorer or any other process.
- If you select the hang option ProcDump will collect dumps of the process you select.
- If you select the crash option Procdump will monitor the process you select for an expected crash.
- If you select the highcpu option Procdump will monitor the process you select and once the CPU utilization exceeds 30% for more than 10 seconds a process dump will be collected. Procdump will continue to monitor the process and collect 2 additional process dumps for a total of 3 dumps each 10 seconds apart.

NOTE: the process must exceed the 30% threshold for 10 seconds otherwise the dump will not be collected. See http://technet.microsoft.com/en-us/sysinternals/dd996900.aspx for details on Procdump

Data collected:

Memory Dump Files

Description 
Collapse this tableExpand this table
Hangdump file(.out):{computername}_{processname}.out
MemoryDump Files: {computername}_DumpFile_Information.txt
MemoryDump Files: {computername}_{processname}_{date}_{time}.zip

Internet Explorer WPAD:

Description
    - Prompt to choose the affected user
    - Prompt for user credentials
    - Clear Temporary Internet Files on IE7 and newer, delete .pac/.dat files on IE6
    - Start network trace (NetSh for Win7/2k8r2, NMCap for Vista/2k8, NetCap for XP 2k3)
    NOTE: Will prompt and open browser to NM3.4 download on Vista / 2k8 if not already installed.
    - Prompt that includes information on the deletion of the contents of IE’s  Connections registry keys
    - Save connections keys to user’s desktop    - Delete Connections key contents under HKCU, HKLM and under the Wow6432Nodes keys for HKCU and HKLM if they exist.
    - Release and renew IP address
    - Launch IE as selected user
    - Stop and collect network tracesFor additional information on what is collected by the IE WPAD task refer to the IE WPAD SDP KB artilcle: KB2668985 http://support.microsoft.com/kb/2668985 (http://support.microsoft.com/kb/2668985)

Internet Explorer Simultaneous Fiddler and Netmon

Description The Internet Explorer Simultaneous Fiddler and Netmon data collection will perform the following items:
    User dialog prompt to choose data collection options including:
    - Initial address for IE to access upon launch
    - Select affected user
    - Run IE as selected user
    - Collect Network Monitor trace
    - Collect Fiddler trace
    - Clear Temporary Internet Files
    - Set TabProcGrowth to 0 for testing
    - Reset Connection settings:
       Prompt that includes information on the deletion of the contents of IE’s Connections registry keys Save connections keys to user’s desktop
       Delete Connections key contents under HKCU, HKLM and under the Wow6432Nodes keys for HKCU and HKLM if they exist.
    - Release and renew the IP address
    - Launch IE without extensions (-extoff)
Upon acceptance of the dialog, IE will launch to the specified address.
At this time reproduce the issue and upon closing IE tracing will stop, TabProcGrowth, and proxy settings will be restored. The Fiddler trace, Network Monitor trace and any log files associated with the tracing will be collected. Data collected:
Autoproxy Files
Description
Collapse this tableExpand this table
Autoproxy File:{computername}_{username}_Autoproxy_file_log__Date_{date}_{time}.txt

Fiddler Capture
Description 
Collapse this tableExpand this table
Fiddler Capture File [Password Protected](.zip):{computername}_{username}_Fiddler__Date_{date}_{time}.zip

Network Trace
Description 
Collapse this tableExpand this table
NMCap Trace Log:{computername}_{username}_NMcap_Trace_DisplayNet__Date_{date}_{time}.txt
Network Monitor trace file:{computername}_{username}_NMcap_Date_{date}_{time}.cap
Generate an AXIS log (Windows Vista+)

Description 
This task will allow you to collect an installation log during attempts to install an ActiveX control via the ActiveX Installer Service.

See http://technet.microsoft.com/en-us/library/cc721964(v=WS.10).aspx (http://technet.microsoft.com/en-us/library/cc721964(v=WS.10).aspx)  for details on the ActiveX Installer Service

Data collected:

AxtiveX Installer Service Logging

Description 
Collapse this tableExpand this table
AXIS Event Log:{computername}_Run_Date_{month}_{day}_{year}_Time_{time}_AxisServiceLog.evt 

References

KB 973559 - Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) for Windows 7
http://support.microsoft.com/kb/973559 (http://support.microsoft.com/kb/973559)







Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.

Applies to
  • Windows Internet Explorer 9
  • Windows 7 Enterprise
  • Windows 7 Home Basic
  • Windows 7 Home Premium
  • Windows 7 Professional
  • Windows 7 Service Pack 1
  • Windows 7 Starter
  • Windows 7 Ultimate
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Windows Internet Explorer 7
  • Windows Internet Explorer 7 for Windows Server 2003
  • Windows Internet Explorer 7 for Windows Server 2003 IA64
  • Windows Internet Explorer 7 for Windows XP
  • Windows Internet Explorer 7 in Windows Vista
  • Windows Internet Explorer 8
  • Windows Internet Explorer 8 for Windows Server 2003 x64
  • Windows Internet Explorer 8 for Windows Server 2008
  • Windows Internet Explorer 8 for Windows Server 2008 x64
  • Windows Internet Explorer 8 for Windows Vista x64
  • Windows Internet Explorer 8 for Windows XP
  • Windows Internet Explorer 8 on Windows Server
  • Microsoft Internet Explorer 6.0
  • Microsoft Internet Explorer 6.0 Service Pack 1
Keywords: 
KB2547207
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support