0) then 'oPL.TargetRegEdit cRegOpWrite, cRegCondAlways, cmiREG_SZ, "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW", "DWFileTreeRoot", szDWFileTreeRoot, cmiString oPL.TargetRegEdit cRegOpWrite, cRegCondAlways, cmiREG_SZ, "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\DW", "DWFileTreeRoot", szDWFileTreeRoot, cmiString end if if (Len(szDWReporteeName) > 0) then 'oPL.TargetRegEdit cRegOpWrite, cRegCondAlways, cmiREG_SZ, "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW", "DWReporteeName", szDWReporteeName, cmiString oPL.TargetRegEdit cRegOpWrite, cRegCondAlways, cmiREG_SZ, "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\DW", "DWReporteeName", szDWReporteeName, cmiString end if '//Trace Exit oPL.TraceLeave szProcName End sub ]]> <%= ASP.Header %> <%= ASP.PropHandlers %>

Custom Properties in Error Reporting

| <%= ASP.ShowSpan("cprops", False) %> |

Resources in Error Reporting

| <%= ASP.ShowSpan("res", False) %> |

<%= ASP.Footer %> ]]> The Error Reporting component is used to report kernel faults, program errors or crashes, system hang-ups, and unplanned system shutdowns. The data is collected by Microsoft in order to track and help fix these problems.

Component Configuration

The following table lists the configuration settings for this component:

Property or setting name Default setting Purpose and use Example property Example setting
DoReport 1 Enables error reporting (1 = enabled / 0 = disabled)    
ShowUI 1 Enables error notification (1 = enabled / 0 = disabled)    
ForceQueueMode 0 Enables forced queuing of program crash error reports to disk (1 = enabled / 0 = disabled)    
DWNoSecondLevelCollection 0 Disables collection of second-level data (any data besides the error signature and crash dump) (1 = disable collection / 0 = enable collection)    
DWReporteeName   Replaces the word Microsoft in the error reporting / notification dialogs with the contents of this setting.   Microsoft
DWFileTreeRoot   Enable corporate error reporting (reporting to a file share instead of via http to Microsoft); enter a Universal Naming Convention (UNC) path to the file share here. If this field is blank, http reporting to Microsoft is used.   \\itg-dumps\errors

Special Notes

Corporate error reporting is designed for organizations that wish to review error reports before they are sent to Microsoft. Organizations can then use the corporate reporting tool, to send the approved reports to Microsoft. To enable this mode, fill in the UNC path that represents the root of the error reporting file tree. To disable it, leave the field blank.

Force Queue Mode is a special mode that causes error reporting to create an error report and store it on disk for later reporting. Only the ten most recent error reports are kept. Reporting will then be offered the next time an administrator logs onto the machine after the error occurred. This setting affects all programs crash errors, including normal applications. The setting is most useful for server devices that have infrequent logons and services that are self-restarting in the event of a crash. The DoReport and ShowUI settings determine the reporting mode.

The following table lists the effects of the possible combinations of settings:

DoReport ShowUI Result
  • 0
  • 0
  • Error reporting is completely disabled: No user interface (UI) will show and no reports will be made
  • 0
  • 1
  • Error reporting is disabled, but users will be notified of errors: the user will see a shortened form of the error dialog. However, instead of a set of Send Report and Don’t Send Report buttons, the user will only have the option to close the dialog. No error report is stored or reported to anyone.
  • 1
  • 0
  • Error reporting is in silent or headless mode. No UI is shown to the user and reports are automatically sent.
  • Due to potential security and privacy issues, this option is only available if reporting is being sent to a corporate file server. If a corporate file server is not specified, then no error reporting will occur.
  • 1
  • 1
  • This is the default error-reporting mode. Users will be shown the error-reporting dialog with a pair of Send Report and Don’t Send Report buttons. Clicking the Send Report button will send the error report to either Microsoft or a corporate file tree if one is specified.

Note   When 'Force Queue Mode' is enabled, an administrator, who is logged onto the system when the error happens, still has to log off and log back on to be able to report the error.

]]> False \\Report Server <Report Destination Name> False True True dwil1033.dll %11%\1033 dwintl.dll False %11% dwwin.exe False %11% faultrep.dll False %11% dumprep.exe False HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting 1 1 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting AllOrNone 4 1 1 1 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\AllOrNone HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting DoReport 4 1 1 True 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DoReport HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting IncludeKernelFaults 4 1 1 True 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\IncludeKernelFaults HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting IncludeMicrosoftApps 4 1 1 True 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\IncludeMicrosoftApps HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting IncludeWindowsApps 4 1 1 True 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\IncludeWindowsApps HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting ShowUI 4 1 1 True 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\ShowUI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\ExclusionList 1 1 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\InclusionList 1 1 1 File kernel32.dll File user32.dll File advapi32.dll File ntdll.dll File version.dll File wtsapi32.dll File comctl32.dll File gdi32.dll File oleaut32.dll File shell32.dll File wininet.dll %11% ersvc.dll False HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc 1 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc Type 32 4 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc Start 2 4 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc ErrorControl 0 4 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc ImagePath %SystemRoot%\System32\svchost.exe -k netsvcs 2 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc DisplayName Error Reporting Service 1 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc DependOnService 7 1 1 520070006300530073000000 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc Description Allows error reporting for services and applictions running in non-standard environments. 1 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc ObjectName LocalSystem 1 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc\Parameters 1 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc\Parameters ServiceDll %SystemRoot%\System32\ersvc.dll 2 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc\Security 1 1 1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ersvc\Security Security 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000 3 1 1 File imm32.dll File svchost.exe RegValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs File psapi.dll File dbghelp.dll File winsta.dll File userenv.dll File riched20.dll File shfolder.dll File ole32.dll HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\svchost netsvcs 7 3 1 {00000000-0000-0000-0000-000000000000} 650072007300760063000000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\svchost\netsvcs File apphelp.dll {00000000-0000-0000-0000-000000000000} File RpcSs.DLL Dependency upon 'RpcSs.DLL' {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW 1 1 1 {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW 1 1 1 DWFileTreeRoot HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW 1 1 4 DWNoSecondLevelCollection False 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWNoSecondLevelCollection {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW 1 1 1 DWReporteeName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWReporteeName {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW 1 1 4 DWNoExternalURL False 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWNoExternalURL {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW 1 1 4 DWNoFileCollection False 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWNoFileCollection {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting 1 1 4 ForceQueueMode False 0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\ForceQueueMode {00000000-0000-0000-0000-000000000000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting 1 1 4 IncludeShutdownErrs True 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\IncludeShutdownErrs Error Reporting 1.0 Allows reporting of user / kernel faults, hangs, and unplanned shutdowns. 2000 Microsoft Corp. Microsoft Corp. derekm derekm 1/11/2001 10/28/2001 7:44:54 PM {00000000-0000-0000-0000-000000000000} savedump.exe %11% False False 0 19456 savedump.exe {00000000-0000-0000-0000-000000000000} File DBGENG.DLL Dependency upon 'DBGENG.DLL' Save Dump 1.0 Tool to save kernel mode dump files 2002 Microsoft Corp. Microsoft Corp. andreva andreva 5/8/2002 12:07:04 AM 5/8/2002 12:40:33 AM {00000000-0000-0000-0000-000000000000} File DBGHELP.DLL Dependency upon 'DBGHELP.DLL' {00000000-0000-0000-0000-000000000000} dbgeng.dll %11% False False 0 847872 dbgeng.dll Primitive: Dbgeng 1.0 Primitive: Dbgeng 2002 Microsoft Corp. 2002 Microsoft Corp. andreva jomorris 5/8/2002 12:34:09 AM 5/8/2002 12:40:43 AM