Share via

Complete Memory Dump Windows Server 2012

  • Article

Introduction: This article describes the process of capturing complete memory dump on windows server 2012 installed on Dell Latitude E6430 Laptop.  

**Prerequisites to capture complete memory dump:

**

 Component Description
Operating System Windows Server 2012
Operating System Build Version 6.2(Build 9200)
RAM 8GB
PageFile 1.5 Time of RAM
Keyboard                        External USB Keyboard

Windows Registry Requirement

  1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl\CrashDumpEnabled = 1

  2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters ( this is specifically for USB keyboard )
        create REG_DWORD = CrashOnCtrlScroll
        value = 1

Testing:

Step 1: After the above settings are done, restart the server operating system

Step 2: Post restart , right ctrl + scroll lock + scroll lock

Step 3: You would see a blue screen with the dump getting generated

Step 4: navigate to %systemroot% to find memory.dmp

Exception:

I wasn't able to generate the memory dump using the inbuilt keyboard or using OSK.