Server failing to create memory dump memory.dmp after a blue screen BSOD


Strange one here:

We have a server that blue screens every now and again, and we have been trying to work out why by looking through the memory dumps. Recently however the server has crashed twice and not created or replaced the dump file.

Nothing has changed in that the pagefile has not been moved, and the server is not losing power and rebooting because of that. We are presuming it is bluescreening and rebooting as it has been doing in the past.

Anybody any ideas?

I cannot stop it performing the autoreboot so I can definately confirm it is blue screening, as getting the server back up and running is more important as this is a 24/7 manufacturing site and the crash is more likely to occur when I am out of the office than in.

The existing memory.dmp file that was there from the last creation did not appear to be corrupt and I even deleted it prior to the last crash in case it was a problem with overwriting it.

500 pts as it has me stumped, and that's not a good thing to tell the application owner..



Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Check your registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl - is 'CrashDumpEnabled' set to '1' and 'Overwrite' also?
Also make sure there is enough space on the partition for the dump. If your making a full dump (and not the minidump, although that should normally be enough) you will need at least the same amount of free space as your RAM size. I'm not sure, but the drive may also have to be defragged.
If I remember correctly, you have to have a swap file on the boot/system partition, for the dump to be created.  Even if it is only the minimum size 2Mb swapfile.  Did that setting get changed after your last successful dump?

Check it out.

Good Luck

Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

matthewcapstickAuthor Commented:
Thanks to both of you.

Have checked everything and all is OK. The registry settings are OK and the disk space available is plenty. The settings for the pagefile are OK too and not been changed.

We had a crash last night at 2am too and the same has happened. No memory.dmp :(
Have you checked the startup and recovery of your system properties, maybe the folder which is set in there to take your memory.dmp doesn't exist?
matthewcapstickAuthor Commented:
Thanks again.

Yes that is all OK and exists. The strange thing is that it was all working OK but suddenly stopped working.

Can you confirm your VM swapfile is, say, 800MB or so or highter, confirm it IS on drive C: (same volume as your OS), and the dump style is set to kernel memory dump?  

What's the error in the eventlog?

matthewcapstickAuthor Commented:
Yes all that is correct.

Saldy there is no event log error. Just the usual message to say the system has restarted. Have checked to ensure there are no power failures. The power feeds to the server are from different supplies and neither show any failures.
You say it all stopped working suddenly.
What took place aorund that time?
Do you have automatic updates turned on?  Was some "patch" installed in preceding weeks?  How common are your crashes?  You might take a look at what updates were supplied between you last successful dump, and the first crash w/o a dump.

You might even run a search and specify dates of changed files, to find out what all got changed.


Use that to enable C-SL-SL forcing a dump, then reboot, then try to force the dump....can you generate a memory dump?

In any event, if no log entries say that a bluescreen took place, it's most likely you have a hardware problem, so I'd suggest running hardware diagnostics.  Windows will bluescreen the box (and write to the eventlog) if it has control if the hardware.  If it doesn't, nothing happens, nothing gets written - the box just reboots.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.