Clik here to view.
Part 3: Understanding !PTE - Non-PAE and X64
Hello, Ryan Mangipano (ryanman) again with part three of my series on understanding the output of the !PTE command. In this last installment I’ll continue our manual conversion of Virtual Addresses by...
View ArticleClik here to view.
We Are Hiring - Windows Server Escalation Engineer Positions
Ron here again sending out another reminder about postings for our team. If you like to debug this may be for you- Want to debug the most difficult problems against the largest, most complex piece of...
View ArticleClik here to view.
I Want A Debugger Robot
Hi, My name is Sabin from the Platforms Global Escalation Services team at Microsoft, and today I want to share with you a recent experience I had debugging an issue reported by an hardware...
View ArticleClik here to view.
We Are Hiring - Windows Server Escalation Engineer Position
We have one remaining Windows Server Escalation Engineer position! Want to debug the most difficult problems against the largest, most complex piece of software ever written? Are you fluent in C and...
View ArticleClik here to view.
Debugging services startup in Svchost from a kernel mode debug session
Windows shared services allow us to run system services together in a single service by having multiple DLLs run in a single process called Svchost. This allows Windows to have many services to run...
View ArticleClik here to view.
Debugging a Bugcheck 0x109
My name is Nader Khonsari. I am an escalation engineer in Platforms Global Escalation Services. I want to share with you a recent experience where 64-bit Windows Server 2008 servers at a customer...
View ArticleClik here to view.
We Are Hiring - Windows Server Escalation Engineer
Would you like to join the world’s best and most elite debuggers to enable the success of Microsoft solutions? As a trusted advisor to our top customers you will be working with to the most...
View ArticleClik here to view.
Expanding Netmon to aid in debugging
A walk-through of creating a Netmon parser in the context of a real case As is obvious to frequent readers of our blog, our team logs a lot of time in our debugger of choice (for some windbg, for...
View ArticleClik here to view.
Debug Sleuth at Work: Hung Server…..Mystery of the unprocessed SMB work item.
Hello folks, Pushkar here. I recently worked on a case where the server was hung at “Applying User Settings” during the logon phase. You might ask what’s going to be new in this post, NTDebugging has...
View ArticleClik here to view.
New Joint Citrix/Microsoft Facebook Forum
Got a virtualization issue?.. Not sure if it’s a Microsoft or Citrix problem?. Jump on the new Facebook forum to discuss your issue, share ideas, opinions and information related to Citrix and...
View ArticleClik here to view.
Hunting for Bugs, but Found a Worm
Hi All, my name is Ron Riddle and I’m an Escalation Engineer on the core Windows team. I worked an issue recently wherein a svchost.exe was crashing due to heap corruption; so, after enabling Page...
View ArticleClik here to view.
Interpreting a WHEA error for a MCA fault
Howdy fellow debuggers! This is Graham McIntyre, I am an Escalation Engineer in Platforms Global Escalation Services. We get questions from time to time from customers who experience a WHEA bugcheck...
View ArticleClik here to view.
How Queue Deadlocks Happen
I recently worked on an interesting system hang issue with a deadlocked work queue and wanted to share some information about how we resolved the issue. In this example, we will demonstrate how a...
View ArticleClik here to view.
Our Team is Hiring - Windows Server Escalation Engineer
Would you like to join the world’s best and most elite debuggers to enable the success of Microsoft solutions? As a trusted advisor to our top customers you will be working with to the most...
View ArticleClik here to view.
Windows 7 XP Mode – Auto Publish ‘Not Available’
Hello All, Ron Riddle here again to share another mystery relating to the XP Mode Auto Publish feature for Windows 7 that had an unexpected root cause. As you may know, the Auto Publish feature...
View ArticleClik here to view.
Control Panel Policy and the Missing Icon
A customer recently reported a rather peculiar problem. They were working on a roll out of Windows 7, and one of the policies they employed on their domain was the “Show only specified control panel...
View ArticleClik here to view.
The Mystery of Lsass.exe Memory Consumption, (When all components get involved)
Hi All, this is Karim Elsaid and I’m a Support Escalation Engineer working with the Dubai platforms support team. Recently I was working on a very challenging and interesting case, and I wanted to...
View ArticleClik here to view.
Understanding Storage Timeouts and Event 129 Errors
Greetings fellow debuggers, today I will be blogging about Event ID 129 messages. These warning events are logged to the system event log with the storage adapter (HBA) driver’s name as the source....
View ArticleClik here to view.
What Is In A RHS Dump File Created By Windows Error Reporting
Hello all, East here. I wanted to give you a hint on how to use a RHS dump to find what thread was part of the Windows Server 2008 R2 cluster RHS recovery deadlock. First let me start off with...
View ArticleClik here to view.
NTFS And 4K Disks
Since the 1960’s, hard disks have always used a block size of 512 bytes for the default read/write block size. Recently drive manufacturers have been moving toward a larger block size to improve...
View Article