Skip to main content This browser is no longer supported. Show
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. Advanced troubleshooting for Windows freezes
In this articleThis article describes how to troubleshoot freeze issues on Windows-based computers and servers. It also provides methods for collecting data that will help administrators or software developers diagnose, identify, and fix these issues. Note The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products. Identify the problem
Troubleshoot the freeze issuesTo troubleshoot the freeze issues, check the current status of your computer, and follow one of the following methods. For the computer that's still running in a frozen stateIf the physical computer or the virtual machine is still freezing, use one or more of the following methods for troubleshooting:
For the computer that's no longer frozenIf the physical computer or virtual machine froze, but is now running in a good state, use one or more of the following methods for troubleshooting. For a physical computer
For a virtual machine
Collect data for the freeze issuesTo collect data for a server freeze, check the following table, and use one or more of the suggested methods.
Method 1: Memory dumpImportant Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur. A complete memory dump file records all the contents of system memory when the computer stops unexpectedly. A complete memory dump file may contain data from processes that were running when the memory dump file was collected. If the computer is no longer frozen and now is running in a good state, use the following steps to enable memory dump so that you can collect memory dump when the freeze issue occurs again. If the virtual machine is still running in a frozen state, use the following steps to enable and collect memory dump. Note If you have a restart feature that's enabled on the computer, such as the Automatic System Restart (ASR) feature in Compaq computers, disable it. This setting is usually found in the BIOS. With this feature enabled, if the BIOS doesn't detect a heartbeat from the operating system, it will restart the computer. The restart can interrupt the dump process.
Method 2: Data sanity checkUse the Dump Check Utility (Dumpchk.exe) to read a memory dump file. It can also verify that the file was created correctly and isn't corrupted or invalid.
Learn how to use Dumpchk.exe to check your dump files: Method 3: Performance MonitorYou can use Windows Performance Monitor to examine how programs that you run affect your computer's performance, both in real time and by collecting log data for later analysis. To create performance counter and event trace log collections on local and remote systems, run the following commands in a command prompt as administrator:
Then, you can start or stop the log by running the following commands:
The Performance Monitor log is located in the path: Other methods to collect dataUse memory dump to collect data for the physical computer that's running in a frozen stateWarning Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur. If the physical computer is still running in a frozen state, follow these steps to enable and collect memory dump:
Use Pool Monitor to collect data for the physical computer that is no longer frozenPool Monitor shows you the number of allocations and outstanding bytes of allocation by type of pool and the tag that is passed into calls of ExAllocatePoolWithTag. For more information, see Using PoolMon to Find a Kernel-Mode Memory Leak and PoolMon Examples. Use memory dump to collect data for the virtual machine that's running in a frozen stateUse the one of the following methods for the application on which the virtual machine is running. Microsoft Hyper-VYou can also use the built-in NMI feature through a Debug-VM cmdlet to debug and get a memory dump. To debug the virtual machines on Hyper-V, run the following cmdlet in Windows PowerShell:
VMwareYou can use VMware snapshots or suspend state and extract a memory dump file equivalent to a complete memory dump file.
Use VMware's Checkpoint To Core Tool (vmss2core) to convert both suspend ( Citrix XenServerThe memory dump process occurs by pressing the RIGHT CTRL + SCROLL LOCK + SCROLL LOCK keyboard combination. For more information, see Method 1 of How to Trigger a Memory Dump from a Windows Virtual Machine Running on XenServer from Citrix. Space limitations on the system drive in Windows ServerOn a Windows Server, you may not have enough free disk space to generate a complete memory dump file on the system volume. There's a second option if the system drive doesn't have sufficient space. You can use the DedicatedDumpFile registry entry. For more information, see Configure the destination path for a memory dump. For more information, see How to use the DedicatedDumpFile registry value to overcome space limitations on the system drive. FeedbackSubmit and view feedback for Which of the following task manager tabs on a Windows system is used to display the processes?Users tab. The Users tab shows all the users logged in to the computer. In Windows 8, the Users tab also shows the processes that each user is running.
Which of the following steps should the technician take first to determine whether startup processes are responsible for the slow startup?Which of the following steps should the technician take first to determine whether startup processes are responsible for the slow startup? The technician should measure the time it takes to start the system using a normal boot and compare that time against the time it takes for the system to perform a clean boot.
Which of the following Windows tools is used to measure how well software and hardware are performing by displaying statistics in real time?Which of the following Windows tools is used to measure how well software and hardware are performing by displaying statistics in real time? A Microsoft Management Console snap-in that can track activity by hardware and software to measure performance.
Which of the following Windows tools is used to measure how well software and hardware are performing by displaying statistics in real time quizlet?Correct. Performance Monitor is a Windows tool used specifically for viewing performance statistics. It can monitor and report in real time and can save collected data in logs for future use. A Windows user is attempting to exit a locked up desktop application that is not responding to mouse or keyboard input.
|