Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Advanced Windows Debugging and Troubleshooting - Contributions to this blog are made by the Microsoft Global Business Support - Windows Serviceability team.
What Did Storport Do With My I/O?
In a previous article I showed how to track an I/O request from the filesystem, through the class...
Author: ntdebug Date: 06/21/2012
Hotfix to Enable Mini-Filter Performance Diagnostics With XPerf for Windows Server 2008R2
Greetings ntdebugging community, Bob here again and today I would like to let everyone know about a...
Author: ntdebug Date: 05/31/2012
Debugging a Crash, Found a Trojan
Hi, I'm Manish from Global Escalation Services. I would like to present a multiple random bug check...
Author: ntdebug Date: 05/23/2012
Updated Archive of the NtDebugging Twitter Debug Tips
Every Wednesday (usually) we post a debug tip to our twitter page at...
Author: ntdebug Date: 04/30/2012
Troubleshooting Memory Leaks With Just a Dump
Hello debuggers, the debug ninja is back again. Sometimes we have a scenario where a process...
Author: ntdebug Date: 04/26/2012
How the Clipboard Works, Part 2
Last time, we discussed how applications place data on the clipboard, and how to access that data...
Author: ntdebug Date: 03/29/2012
How the Clipboard Works, Part 1
Recently I had the opportunity to debug the clipboard in Windows, and I thought I’d share some of...
Author: ntdebug Date: 03/16/2012
What Should Never Happen... Did
Hi, this is Bob Golding; I wanted to write a blog about an interesting hardware issue I ran into....
Author: ntdebug Date: 02/23/2012
Identifying Global Atom Table Leaks
Hi, it's the Debug Ninja back again with another debugging adventure. Recently I have...
Author: ntdebug Date: 01/31/2012
Stop 0x19 in a Large Pool Allocation
Hello all, Scott Olson here again to share another interesting issue I recently debugged with pool...
Author: ntdebug Date: 01/27/2012
My Kernel Debugger Won't Connect
Hello ntdebugging readers, the Debug Ninja is back again with a quick blog this holiday...
Author: ntdebug Date: 12/29/2011
Call Stacks for Pool Allocations
Hello, it's the Debug Ninja back again for another NtDebugging Blog article. For as long as I...
Author: ntdebug Date: 10/31/2011
Bcdedit Tips and Tricks For Debugging Part 1
Hello everyone, my name is Sean Walker, and I am on the Platforms OEM team in Washington. This...
Author: ntdebug Date: 09/21/2011
Determining The Interrupt Line For A Particular PCI-E Slot
Hi debuggers, this is Graham McIntyre again. These days I’m working more closely with hardware so I...
Author: ntdebug Date: 09/01/2011
For testing purposes only, and other desktop watermarks
Hi all, Matt here again. One of our team’s main functions is to work with our development...
Author: ntdebug Date: 08/05/2011
LUN Discovery in a Nutshell
The way the disk configuration is determined on a Windows system is by a process called “discovery”....
Author: ntdebug Date: 07/21/2011
Updated Archive of the Debug Ninja’s Twitter Debug Tips
Every Wednesday (usually) I post a debug tip to our twitter page at...
Author: ntdebug Date: 07/20/2011
A Classic Case of Whodunit
Sometimes we encounter problems that just don't make sense. I don't mean a high powered lawyer...
Author: ntdebug Date: 06/29/2011
NTFS And 4K Disks
Since the 1960’s, hard disks have always used a block size of 512 bytes for the default...
Author: ntdebug Date: 06/28/2011
Understanding Storage Timeouts and Event 129 Errors
Greetings fellow debuggers, today I will be blogging about Event ID 129 messages. These...
Author: ntdebug Date: 05/06/2011
The Mystery of Lsass.exe Memory Consumption, (When all components get involved)
Hi All, this is Karim Elsaid and I’m a Support Escalation Engineer working with the Dubai platforms...
Author: ntdebug Date: 04/27/2011
Control Panel Policy and the Missing Icon
A customer recently reported a rather peculiar problem. They were working on a roll out of...
Author: ntdebug Date: 04/22/2011
Windows 7 XP Mode – Auto Publish ‘Not Available’
Hello All, Ron Riddle here again to share another mystery relating to the XP Mode Auto Publish...
Author: ntdebug Date: 03/28/2011
Interpreting a WHEA error for a MCA fault
Howdy fellow debuggers! This is Graham McIntyre, I am an Escalation Engineer in Platforms Global...
Author: ntdebug Date: 01/28/2011
Hunting for Bugs, but Found a Worm
Hi All, my name is Ron Riddle and I’m an Escalation Engineer on the core Windows team. I...
Author: ntdebug Date: 01/07/2011
New Joint Citrix/Microsoft Facebook Forum
Got a virtualization issue?.. Not sure if it’s a Microsoft or Citrix problem?. Jump on the new...
Author: ntdebug Date: 11/04/2010
Expanding Netmon to aid in debugging
A walk-through of creating a Netmon parser in the context of a real case As is obvious to frequent...
Author: ntdebug Date: 08/26/2010
Debugging a Bugcheck 0x109
My name is Nader Khonsari. I am an escalation engineer in Platforms Global Escalation Services. I...
Author: ntdebug Date: 08/10/2010
Debugging services startup in Svchost from a kernel mode debug session
Windows shared services allow us to run system services together in a single service by having...
Author: ntdebug Date: 07/20/2010
I Want A Debugger Robot
Hi, My name is Sabin from the Platforms Global Escalation Services team at Microsoft, and today I...
Author: ntdebug Date: 06/30/2010
Part 3: Understanding !PTE - Non-PAE and X64
Hello, Ryan Mangipano (ryanman) again with part three of my series on understanding the output of...
Author: ntdebug Date: 06/22/2010
x64 Manual Stack Reconstruction and Stack Walking
My name is Trey Nash and I am an Escalation Engineer on the Core OS team. My experience is as a...
Author: ntdebug Date: 05/12/2010
Storport ETW Logging to Measure Requests Made to a Disk Unit
Greetings NTDEBUGGING community, Bob here again, and today I would like to let everyone know about a...
Author: ntdebug Date: 04/22/2010
Understanding VSS in DPM
Data Protection Manager 2007 utilizes Windows’ Volume Shadow Copy Service to protect Data Sources on...
Author: ntdebug Date: 04/16/2010
A Case of Mysterious Memory Corruption
Hi, this is Chad from the OEM team. You may remember me from such posts as “Debugging a bluescreen...
Author: ntdebug Date: 04/15/2010
Archive of the Debug Ninja’s Twitter debug tips
Every Wednesday I post a debug tip to our twitter page at www.twitter.com/ntdebugging. This blog is...
Author: ntdebug Date: 04/15/2010
Understanding !PTE, Part2: Flags and Large Pages
Hello, it's Ryan Mangipano with part two of my PTE series. Today I'll discuss PDE/PTE flags, the...
Author: ntdebug Date: 04/14/2010
Upcoming Blog ARTICLES
Working on the Global Escalation Services Team at Microsoft is really a cool gig. We’re privileged...
Author: ntdebug Date: 04/02/2010
How to use the DedicatedDumpFile registry value to overcome space limitations on the system drive when capturing a system memory dump
Prior to Windows Vista and Windows Server 2008 we had to keep a large page file on the system drive...
Author: ntdebug Date: 04/02/2010
Critical Device Database TIP
On a fairly regular basis, Bob Golding, our resident GES storage guru, sends out debugging tips to...
Author: ntdebug Date: 03/25/2010