CrashDumpEnabled

  • Article

Specifies the type of information to be saved in the event of a crash.

Contains an integer that specifies the type of information to capture in a dump (.dmp) file that is generated when the system stops unexpectedly.

The .dmp file is typically saved in %SystemRoot% as Memory.dmp.

Values

Set CrashDumpEnabled to one of the following values:

Value Description

1

Records all the contents of system memory. This dump file may contain data from processes that were running when the information was collected.

2

Records only the kernel memory. This dump file includes only memory that is allocated to the kernel, kernel-mode drivers, and other kernel-mode programs. It does not include unallocated memory or any memory that is allocated to user-mode programs.

For most purposes, this kind of dump file is the most useful because it is significantly smaller than the complete memory dump file, but it contains information that is most likely to have been involved in the issue.

If a second problem occurs, the dump file is overwritten with new information.

3

Records the smallest amount of useful information that may help identify why the device stopped unexpectedly. This type of dump file includes the following information:

  • A list of loaded drivers.
  • The processor context (PRCB) for the processor that stopped.
  • The process information and kernel context (EPROCESS) for the process that stopped.
  • The process information and kernel context (ETHREAD) for the thread that stopped.
  • The kernel-mode call stack for the thread that stopped.

This kind of dump file can be useful when space is limited. However, because of the limited information included, errors that were not directly caused by the thread that was running at the time of the problem may not be discovered by analyzing this file.

The date is encoded in the file name. If a second problem occurs, the previous file is preserved and the new file is given a distinct name. A list of all small memory dump files is kept in the %SystemRoot%\Minidump folder.

4

Records the smallest amount of useful information. This value produces the same results as entering a value of 3.

7

Records only the kernel memory. This value produces the same results as entering a value of 2.

This is the default value.

Any other value

Disables crash dump and does not record anything.

 

Valid configuration passes

specialize

Applies to

Edition x86-based devices x64-based devices ARM-based devices
Windows 10 Enterprise

x86

amd64

N/A

 

 

 

Send comments about this topic to Microsoft