Microsoft Premier Field Engineering (PFE) Windows Reporting Utility =========================================================== Version: 8.9.1.1 (MajorVer.MinorVer.BuildMajorVer.BuildMinorVer) Build Date: 30 OCTOBER 2007 Microsoft Contacts for PFE MPS_REPORTS: Sean Wheeler (SeanW@microsoft.com) Bruce Langworthy (Bruce.Langworthy@microsoft.com) Robert Smith (Robert.Smith@microsoft.com) SQL Specific sections: Norm Eberly (Norman.Eberly@microsoft.com) PURPOSE ======= The MPSRPT_PFE.EXE utility is utilized to gather detailed system status and configuration information. The data collected will be helpful towards fault isolation and also for general configuration information. NOTE: You may install and use an unlimited number of copies of MPSRPT_PFE.EXE solely for the purpose of gathering system information necessary for Microsoft Premier Field Engineering to provide you with technical support services requested by you. All other purposes are not supported by Microsoft. Please refer to the EULA for more detailed information regarding your usage rights. INSTALLATION ============ The MPSRPT_PFE.EXE utility is self-extracting and will run on Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003 x86. Windows Server 2003 x64 (AMD64), and Windows Server 2003 for Itanium. When MPSRPT_PFE.EXE is run, previously existing MPSRPT_PFE.EXE tools and documents will be deleted as long as there are no open handles to the MPSREPORTS folder. If there is a ".cab" folder that folder will not be touched. Having previous diagnostic output reports is often helpful with root cause analysis. Use the /Q option to install the Utility without running the report. MPSRPT_PFE.EXE /Q This is functionally the same as running the following command: MPSRPT_PFE.EXE /C:"cmd /c Setup.cmd /I" The reporting Utility DOES NOT make any registry changes or modifications to the operating system. Since no changes are made to the system, it is possible to just copy the contents of the MPSReports folder tree located in %SYSTEMROOT% to the %SYSTEMROOT% folder of another system. ALTERNATE INSTALLATION PATH =========================== It is now possible to instruct MPS Reports to be extracted to an alternate location (eg. other than %SYSTEMROOT%). This is especially useful if your system drive is low on available disk space. The /P option has been added to the Setup.cmd script to allow you to specify an alternate location. This folder must exist. The MPS Reporting utility will not create it. The folder specified becomes the new root folder for the MPSReports folder tree. All of the data collected will also be logged to this location. The following example illustrates how to use the /P option: MPSRPT_PFE.EXE /C:"cmd /c Setup.cmd /P D:\data" This results in the MPSReports folder being created as a subfolder of D:\data. This alternate extraction path is recorded in the MPSRPT.CMD script. Therefore, it is possible to run the MPSRPT.CMD script from the alternate location and expect that all data will be logged to that same alternate location. Please see the section for PACKAGE CONTENTS and DIRECTORY STRUCTURE for details on what is copied to the system and what directories are made. USAGE ===== The Utility has two reporting modes: LITE (default) and FULL. Either mode can be run with the /Q Quiet-option. The Quiet-option reduces the amount of user interaction with the Utility. LITE Mode --------- Executing MPSRPT_PFE.EXE with no command-line options runs the Utility in LITE reporting mode. Examples: MPSRPT_PFE.EXE MPSRPT_PFE.EXE /C:"cmd /c Setup.cmd /Q" FULL Mode --------- FULL mode can take an extended period of time to gathering information and should only be run when directed by a Microsoft engineer. Examples: MPSRPT_PFE.EXE /C:"cmd /c Setup.cmd /F" MPSRPT_PFE.EXE /C:"cmd /c Setup.cmd /F /Q" The above examples show how to install the Utility and run the reports with the options FULL reporting and Quiet mode. The default behavior (using no command-line options) is Lite reporting in Verbose mode. If the Utility is already installed, you can execute the MPSRpt.cmd batch file from the Bin folder. Examples: MPSRpt.cmd MPSRpt.cmd /F MPSRpt.cmd /F /Q MPSRpt.cmd /Q For your convenience CAB file containing all of the reports will be created. Please send the cab file to the Microsoft engineer who is working on your support incident. Each time you run the Utility it will overwrite any existing report files. However, a new CAB file will be created. If you need to look at an older report you can extract it from the old CAB file. NOTES AND KNOWN ISSUES ====================== As the MPSRPT_PFE.EXE utility runs it will display the name of the executable that is currently running to gather the required information. If you suspect that the process is hung or is creating an extremely negative impact on system performance you can kill the currently running utility using Task Manager. Open Task Manager and select the Processes Tab. Locate the name of the executable in the Image Name column, select it and click the End Process button. To locate executable more easily, sort the Image Name column alphabetically by clicking on the column header. If there are multiple instances of a Utility running you may need to kill all instances. The instance with the highest Process ID (PID) number is probably the one associated with the running instance of MPSRPT_PFE.EXE. Problems of hanging utilities are most often reported for MSINFO32.EXE, DUMPEL.EXE and GETEVENTS.VBS. The problems with MSINFO32.EXE are usually related to problems with WMI. Microsoft has several updates available for WMI components that may resolve this problem. This can also be caused by third-party WMI components. The DUMPEL.EXE and GETEVENTS.VBS utilities are used to get event log in CSV format. These can appear to be hung on systems with very large event logs. It is important that you try to let these complete so that important information is not omitted from the results. Average completion times for the MPS Reporting Utility Lite Mode are in the range of 5 to 15 minutes. If for some reason the data collection process is not completing try running the Utility during non-peak usage times. FULL Mode should only be run during non-peak usage times or on systems that are not under heavy load. To ensure that all of the data is collected properly, the user running the MPS Reporting Utility must have Administrative rights on the system. If you have any questions regarding the usage or operations of the Utility, consult with your Microsoft Advisory Services Professional. Windows Vista Support: This version of MPS_REPORTS is compatible with Windows Vista. MPS_REPORTS will need to be run in Administrative mode by either starting in an Administrator .CMD prompt, or by right-clicking this utility and choosing "Run As Administrator". NOTES ON LONG RUN TIMES OR HANGS RUNNING MSINFO32 ================================================= If System Information (MSFINO32) takes a long time to run but does eventually complete, check the following section of MSINFO32: Software Environment -> Startup Programs If this list is populated with all files from the %SystemRoot%\System32 folder, edit the following registry values: HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders String Value="Startup" String Value="Programs" 1. Go to a CMD prompt and enter the following command: echo %SystemRoot%\system32\config\systemprofile\Start Menu\Programs\Startup ex. C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup 2. Copy and paste the resulting string into the "Startup" string value in the registry (listed above). 3. Still at the CMD prompt, enter the following command: echo %SystemRoot%\system32\config\systemprofile\Start Menu\Programs 4. Copy and past the resulting string into the "Programs" registry value ex. C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs Try running MSINFO32 again and you should see a vast improvement and a short list of startup programs. Note, this issue seems to be limited to Windows XP machines, but the same solution can apply to Server 2003 if the symptoms are exactly the same. NOTE ON "The system cannot find the file specified" =================================================== If an error message is displayed "The system cannot find the file specified", and a blank Notepad window opens, stop the current MPS_REPORTS process, delete the folder called "MPSReports" under %SystemRoot% and then try running MPS_REPORTS again. By default, the MPSReports utility will delete previous versions of "DOC" folders" and "BIN" folders, but will leave the "CAB" folder if it exists. This is to preserve previous report collections which can be useful for troubleshooting. Note on 64-bit systems ====================== This version of MPS_REPORTS works on x64 Windows as well as IA-64 Windows. This package contains native versions of several utilities to facilitate collection of data on 64-bit machines. Note on hang during "REG.EXE - Dumping Image File Execution Options" ==================================================================== This report can pause if there are remnants from previous MPS_REPORTS runs. The best solution is to delete the files in the MPS_REPORTS folder, or delete the entire MPS_REPORTS folder altogether. Once the folder is deleted, re-run the utility. Running MPS Reports as a scheduled job -------------------------------------- MPS Reports can be run as a scheduled job. It should be run in QUIET mode to prevent extraneous user interface windows from being invoked. Use one of the following example command-lines when scheduling the job: MPSRpt.cmd /Q MPSRPT_PFE.EXE /Q /C:"cmd /c Setup.cmd /Q" MPSRpt.cmd /F /Q MPSRPT_PFE.EXE /Q /C:"cmd /c Setup.cmd /F /Q" Here is an example use the AT command to schedule MPS Reports: AT 1:00am %SystemRoot%\MPSReports\MPS\bin\MPSRpt.cmd /Q DIRECTORY STRUCTURE =================== %SystemRoot% Example - C:\WINDOWS \MPSReports MPSRPT_PFE.EXE root folder - can contain many support specific versions \PFE Report output folder for MPS Reports \Bin Tools folder - non-version specific \x64 Folder for x64-based Tools \IA64 Folder for Intel IA64-based tools \x86 Folder for Intel I386-based tools \1381 Windows NT specific tools \2195 Windows 2000 specific tools \2600 Windows XP specific tools \SQL2K SQL 2000 tools \SQL2K5 SQL 2005 tools \SQLsrvr SQL general tools and scripts \Cab Output folder for the CAB files \Doc Folder containing Readme and other files PACKAGE CONTENTS ================ MPSTools.exe CONTENTS File Size Date Version Source -------------------- --------- ---------- ------------ ------------------ bin\MPSrpt.cmd 164,158 02/02/2006 Script for MPS_REPORTS bin\choice.exe 88,576 09/28/2004 Windows Resource Kits bin\ClusMPS.exe 266,295 07/13/2005 1.7.0.5 Microsoft PSS (MPS_REPORTS Cluster from Microsoft.com) bin\CPU_PL.vbs 1,401 05/09/2007 1.0 Scripting Center on Microsoft.com bin\DISKMAP.EXE 8,192 09/28/2004 Windows 2000 ResKit bin\DCOMAppAccessAllowedSetting.vbs 1,023 05/10/2007 1.1 Custom VBScript bin\DCOMAppLaunchAllowedSetting.vbs 1,023 05/10/2007 1.1 Custom VBScript bin\DCOMAppQuery.vbs 1,201 05/10/2007 1.1 Custom VBScript bin\DUMPEL.EXE 53,248 05/22/2002 6.0.2600.1 Windows 2000 ResKit bin\DumpEVT.exe 28,672 03/05/2004 Microsoft PSS (MPS_REPORTS Setup/Perf from Microsoft.com) bin\enumprndrv.vbs 11,016 10/12/2004 2.0 Windows 2000 ResKit bin\FltrFind.exe 40,960 09/28/2004 Microsoft PSS (MPS_REPORTS Setup/Perf from Microsoft.com) bin\getevents4.vbs 99,684 04/23/2007 4.1.10 Vista MSDT Project bin\htdump.exe 25,600 09/28/2004 Microsoft PSS (MPS_REPORTS Setup/Perf from Microsoft.com) bin\ntfrsutl.exe 8,704 03/24/2003 5.2.3790.0 Server 2003 Support Tools bin\OEMInbox.exe 110,592 10/19/2001 Microsoft PSS (MPS_REPORTS Setup/Perf from Microsoft.com) bin\rpcdump.exe 14,336 04/18/2003 5.2.3790.0 Server 2003 ResKit from Microsoft.com bin\secinspect.exe 40,448 03/05/2007 5.2.3790.2851 Microsoft.com bin\x86\checksym.exe 158,912 10/06/2005 6.0.5227.0 Microsoft CSS bin\x86\dcdiag.exe 459,032 02/17/2007 5.2.3790.3959 Server 2003 Support Tools (SP2) bin\x86\devcon.exe 55,808 02/17/2007 5.2.3790.0 Server 2003 Support Tools (SP2) bin\x86\dmdiag.exe 160,768 02/17/2007 5.2.3790.0 Server 2003 Support Tools (SP2) bin\x86\dosdev.exe 6,656 09/28/2004 5.2.3772.0 MPSRPT (Setup/Perf) from Microsoft.com bin\x86\gpotool.exe 56,320 10/28/2005 6.0.5250.0 Microsoft PSS bin\x86\GPResult.exe 61,200 09/28/2004 5.0.2184.1 XP Support Tools (inbox for later OS) bin\x86\memsnap.exe 19,456 02/17/2007 5.2.3790.0 Server 2003 Support Tools (SP2) bin\x86\pstat.exe 9,728 03/03/2006 5.2.3790.0 Server 2003 R2 SDK bin\x86\qfecheck.exe 36,864 09/27/2005 6.2.29.0 Microsoft PSS from KB282784 bin\x86\tlist.exe 20,480 12/16/2005 6.0.5278.0 Debugging Tools from Microsoft.com bin\x86\UnsgnDrv.exe 49,152 09-28-2004 1.0.0.1 MPSRPT (Setup/Perf) from Microsoft.com bin\x86\whoami.exe 32,256 08/17/2001 5.1.2600.0 Windows XP Support Tools bin\x86\2195\reg.exe 49,424 08/16/2002 2.0.0.0 Win2000 SP4 Support Tools bin\x86\2195\dcdiag.exe 217,872 07/27/2005 5.0.2195.7061 KB902843 (hotfix) bin\x86\2195\netdiag.exe 390,928 09/20/2003 5.0.2195.6824 Windows 2000 Support Tools bin\x86\2195\repadmin.exe 55,056 06/19/2003 5.0.2195.6666 Windows Resource Kits bin\x86\fcinfo\fcinfo.exe 83,864 03/14/2007 6.0.5721.0 Microsoft.com (downloads) bin\x86\fcinfo\hbaapi.dll 49,048 03/14/2007 5.2.3790.3056 Microsoft.com (downloads) bin\x86\fcinfo\hbatapi.dll 34,200 03/14/2007 Microsoft.com (downloads) bin\x64\checksym.exe 188,688 08/09/2006 6.0.5479.0 Microsoft CSS bin\x64\dcdiag.exe 693,248 03/25/2005 5.2.3790.1830 Server 2003 Support Tools bin\x64\devcon.exe 70,144 03/24/2005 5.2.3790.1830 Server 2003 Support Tools bin\x64\dmdiag.exe 282,624 03/24/2005 5.2.3790.1830 Server 2003 Support Tools bin\x64\dosdev.exe 8,704 03/24/2005 5.2.3790.1830 bin\x64\gpotool.exe 106,496 10/28/2005 6.0.5250.0 Microsoft CSS bin\x64\MPSRPT_64.EXE 96,768 01/23/2006 6.0.3790.1830 MPSRPT sub-report batch file for x64 bin\x64\pstat.exe 13,312 03/03/2006 5.2.3790.1830 Server 2003 R2 SDK bin\x64\qfecheck.exe 55,296 09/27/2005 6.2.29.0 Microsoft PSS from KB282784 bin\x64\tlist.exe 22,016 12/16/2005 6.0.5278.0 Debugging Tools from Microsoft.com bin\x64\fcinfo\fcinfo.exe 77,312 03/14/2007 6.0.5721.0 Microsoft.com (downloads) bin\x64\fcinfo\hbaapi.dll 51,200 03/14/2007 5.2.3790.3056 Microsoft.com (downloads) bin\x64\fcinfo\hbatapi.dll 36,240 03/14/2007 Microsoft.com (downloads) bin\IA64\checksym.exe 355,088 08/09/2006 6.0.5479.0 Microsoft CSS bin\IA64\dcdiag.exe 1,101,824 03-25-2005 5.2.3790.1830 Server 2003 Support Tools bin\IA64\devcon.exe 92,672 03/24/2005 5.2.3790.0 Server 2003 Support Tools bin\IA64\dmdiag.exe 430,592 03/24/2005 5.2.3790.0 Server 2003 Support Tools bin\IA64\dosdev.exe 14,848 03/24/2003 5.2.3790.0 bin\IA64\gpotool.exe 193,536 10/28/2005 6.0.5250.0 bin\IA64\MPSRPT_64.EXE 152,064 01/23/2006 6.0.3790.0 MPSRPT sub-report batch file for IA-64 bin\IA64\pstat.exe 20,992 03/03/2006 5.2.3790.0 Server 2003 R2 SDK bin\IA64\qfecheck.exe 89,600 09/27/2005 6.2.29.0 Microsoft PSS from KB282784 bin\IA64\tlist.exe 47,104 05/27/2005 6.0.5072.0 Debugging Tools from Microsoft.com bin\IA64\fcinfo\fcinfo.exe 134,040 03/14/2007 6.0.5721.0 Microsoft.com (downloads) bin\IA64\fcinfo\hbaapi.dll 122,264 03/14/2007 5.2.3790.3056 Microsoft.com (downloads) bin\IA64\fcinfo\hbatapi.dll 69,016 03/14/2007 Microsoft.com (downloads) bin\x86\sql2k\osql.exe 53,299 08/12/2004 2000.80.194.0 Shipped with SQL 2000 bin\x86\sql2k5\osql.exe 37,888 08/18/2004 2000.80.194.0 Shipped with SQL 2005 bin\x86\sql2srvr\replinfo.sql 1,458 09/14/2004 Custom script written by Microsoft CSS engineers bin\x86\sql2srvr\spconfig.sql 223 09/14/2004 Custom script written by Microsoft CSS engineers bin\x86\sql2srvr\SQL.vbs 53,073 08/10/2007 Custom script written by Microsoft CSS engineers Documentation Description -------------------- ------------------------------------------------ Doc\CHECKSYM.TXT Documentation for CheckSym.exe Doc\EULA.TXT End-User License Agreement Doc\Readme.txt Documentation for MPS Reporting Utility (this file) Report files created in LITE mode ================================= Event logs - The event logs are captured in both native and CSV format to allow analysis by different methods. %COMPUTERNAME%_Evt_Application.evt %COMPUTERNAME%_Evt_System.evt %COMPUTERNAME%_Evt_Application.CSV %COMPUTERNAME%_Evt_System.CSV The following event logs are only created on Windows 2000 or later and only if the specific service is installed. %COMPUTERNAME%_Evt_Directory_Service.evt %COMPUTERNAME%_Evt_DNS_Server.evt %COMPUTERNAME%_Evt_File_Replication_Service.evt %COMPUTERNAME%_Evt_Directory_Service.CSV %COMPUTERNAME%_Evt_DNS_Server.CSV %COMPUTERNAME%_Evt_File Replication Service.CSV Other event log files created by third party applications are captured in both EVT and CSV format with a similar naming structure as shown above. Fibre Channel HBA information report (if HBAs are installed) %COMPUTERNAME%_Storage_FCINFO.TXT Storage reports %COMPUTERNAME%_Storage_Defrag_Report.txt %COMPUTERNAME%_Storage_DiskDrives.txt %COMPUTERNAME%_Storage_DISKMAP.LOG %COMPUTERNAME%_Storage_DMDIAG.LOG %COMPUTERNAME%_Storage_FTDMPNT.TXT %COMPUTERNAME%_Storage_NTFSINFO.txt %COMPUTERNAME%_Storage_Partitions.txt %COMPUTERNAME%_Storage_SCSI_Controllers.txt (if installed) %COMPUTERNAME%_Storage_IDE_Controllers.txt (if installed) %COMPUTERNAME%_Storage_Volumes.txt %COMPUTERNAME%_Storage_VSSAdmin.txt "Auto Start" items: report of all items that could start automatically from various locations %COMPUTERNAME%_AutoStarts.txt Scheduled Job information - information from both the AT Scheduler and the Task Scheduler %COMPUTERNAME%_Scheduled_Tasks.CSV %COMPUTERNAME%_Scheduled_Tasks.txt System Startup and Crash Recovery data - copies of the BOOT.INI, Autoexec.NT and Config.NT are collected as well as the registry settings that control application and system crash handling %COMPUTERNAME%_BOOT_INI.TXT %COMPUTERNAME%_CONFIG_AUTO.TXT %COMPUTERNAME%_RECOVERY.TXT %COMPUTERNAME%_DRWTSN32.LOG - User-mode application error log Cluster Information - gathers information about MSCS and WLBS if these services are configured on the system. %COMPUTERNAME%_WLBS.TXT - configuration of the Windows Load Balancing Service %COMPUTERNAME%_CLUSTERINFO.TXT - configuration state and resource information from CLUSTER.EXE %Computername%_Cluster_MPS_Information.txt - Cluster configuration information from ClusMPS.exe %COMPUTERNAME%_CLUSTER_REGISTRY.HIV - Cluster service registry hive %COMPUTERNAME%_CLUSTERFILES.[CSV/TXT] - file version information for Cluster Service binaries %COMPUTERNAME%_CLUSTER.LOG - cluster log file %COMPUTERNAME%_CLUSTER_CLCFGSRV.LOG - ClCfgSrv.log file %COMPUTERNAME%_CLUSTER_OBJ.TXT - cluster.obj file %COMPUTERNAME%_CLUSTER_OML.TXT - cluster.oml file %COMPUTERNAME%_CLUSTER_CHKDSK*.LOG - copy of all cluster chkdsk logs System service configuration and trace settings - registry settings for key system components %COMPUTERNAME%_Registry_RegEntries.txt - Settings for LSA, Winlogon, Netlogon, NTDS, NTFRS, RAS and other misc. settings. %COMPUTERNAME%_IPSEC.TXT - Settings for IPSEC (Windows 2000 or later only) Hotfix information - information about hotfix install history %COMPUTERNAME%_HOTFIX.TXT System Diagnostics - output from the Windows diagnostics tools %COMPUTERNAME%_MSINFO32.NFO - Windows 2000 or later diagnostics report %COMPUTERNAME%_WINMSD.TXT - Windows NT 4.0 diagnostics report %COMPUTERNAME%_SYSINFO.TXT - Windows XP/.NET system information %COMPUTERNAME%_PSTAT.TXT - Process Status output show some performance data for the running processes %COMPUTERNAME%_DriverSigning.TXT (or .CSV) - Driver Signing report Network configuration - various network configuration and current state information %COMPUTERNAME%_NETINFO.TXT %COMPUTERNAME%_MISC.TXT Printer configuration - inventory and configuration of installed printer drivers %COMPUTERNAME%_PRINTDRIVERS.TXT - installed driver report from OEMINBOX.EXE or ENUMPRNDRV.VBS %COMPUTERNAME%_PRINTKEY.TXT - Print Spooler registry hive %COMPUTERNAME%_SPOOL.[CSV/TXT] - print driver file information Terminal Server data - lists of users, processes and connections available on a Terminal Server %COMPUTERNAME%_TERMSERV.TXT SQL Server data - File versions, log files, configuration information, etc. %COMPUTERNAME%_sqlsetup.* %COMPUTERNAME%_sqldiag.txt %COMPUTERNAME%_REPLINFO(OSQL).TXT %COMPUTERNAME%_SPCONFIG(OSQL).TXT %COMPUTERNAME%_OLAP.txt %COMPUTERNAME%_ROSETTA_REG.TXT Minidump files (if they exist) %COMPUTERNAME%_minixxx.dmp Hyperthreading Report %ComputerName%_HyperThread.txt Process Information - inventory of the currently running processes and device drivers on the system %COMPUTERNAME%_ChkSym_PROCESS.[CSV/TXT] %COMPUTERNAME%_ChkSym_DRIVERS.[CSV/TXT] System File Information - subset inventory of the most important system files %COMPUTERNAME%_ChkSym_IEFILES.CSV %COMPUTERNAME%_ChkSym_SYSTEM32.CSV %COMPUTERNAME%_ChkSym_SYSROOT.CSV - inventory of %SYSTEMROOT% BackOffice File Information - inventory of the BackOffice applications *if* installed on the system %COMPUTERNAME%_ChkSym_EXCH.CSV - Exchange files %COMPUTERNAME%_Registry_EXCHREG.TXT - Exchange registry keys %COMPUTERNAME%_ChkSym_IIS.CSV - Internet Information Server files %COMPUTERNAME%_ChkSym_ISA.CSV - Internet Security & Acceleration Server file %COMPUTERNAME%_ChkSym_SMS.CSV - Systems Management Server files %COMPUTERNAME%_ChkSym_SNA.CSV - SNA/Host Integration Server files %COMPUTERNAME%_ChkSym_SQL.CSV - SQL Server files %COMPUTERNAME%_Registry_SQLREG.TXT - SQL Server registry keys Microsoft Office File Information - inventory of the Office applications installed on the system %COMPUTERNAME%_ChkSym_MSOFFICE.CSV System log files - Log files created by various Windows components %COMPUTERNAME%_DBErr.txt %COMPUTERNAME%_Backup*.log - NTBackup log files %COMPUTERNAME%_$VDS$.log - Virtual Disk Service debug log %COMPUTERNAME%_MMC30Core.log %COMPUTERNAME%_msmqinst.log %COMPUTERNAME%_ntdtcsetup.log %COMPUTERNAME%_pop3oc.log %COMPUTERNAME%_R2-In-band.log %COMPUTERNAME%_R2-New-files.log %COMPUTERNAME%_WBEM_*.log - WBEM/WMI diagnostic logs %COMPUTERNAME%_SETUPACT.LOG - Windows setup actions log %COMPUTERNAME%_SETUPAPI.LOG - Windows setup API log (including previous versions renamed by service pack installations) %COMPUTERNAME%_SETUPERR.LOG - Windows setup error log %COMPUTERNAME%_SVCPack.log - Service Pack installation log %COMPUTERNAME%_dahotfix.log - MDAC hotfix installation log %COMPUTERNAME%_Q*.log - hotfix installation logs %COMPUTERNAME%_KB*.log - hotfix installation logs %COMPUTERNAME%_DCPROMO*.log - DCPromo logs %COMPUTERNAME%_SURVEY.TXT - Compaq/HP Surveyor log Internet Explorer Information - log files and registry settings for IE %COMPUTERNAME%_IESETUPLOG.TXT - Installation log %COMPUTERNAME%_IEBRNDLOG.TXT - Branding log %COMPUTERNAME%_Registry_IEPOLICYREG.TXT - Dump of policy registry keys for IE %COMPUTERNAME%_Signup.Log - ISP signup log %COMPUTERNAME%_Install.ins - Custom installation log Filter Driver Report %COMPUTERNAME%_FilterDrivers.txt DCOM Reports %ComputerName%_DCOM_Applications.csv %ComputerName%_DCOM_App_Access_Allowed_Setting.csv %ComputerName%_DCOM_App_Launch_Allowed_Setting.csv Report files created in FULL Mode ================================= FULL Mode creates all of the reports in Lite Mode and adds the following extra reports: System File Information - inventory of all application files %ComputerName_ChkSym_ProgramFiles.csv - inventory of the %ProgramFiles% folder %COMPUTERNAME%_PROGFILESx86.[CSV/TXT] - inventory of the %ProgramFiles(x86)% folder on 64-bit machines Security Event logs - captured in both native and CSV format to allow analysis by different methods %COMPUTERNAME%_Evt_Security.evt %COMPUTERNAME%_Evt_Security.CSV Other files created =================== Progress Report - log file showing the progress of the Utility. Used by the Microsoft Advisory Services Professional to debug problems running the report utility %COMPUTERNAME%_PROGRESS.TXT CAB files - Cabinet file containing all of the reports CABDIRECT.[DDF/TXT] - used to create the CAB file - deleted after CAB is created CABERRORS_%DATETIME%.TXT - deleted if no errors occurred during CAB creation %COMPUTERNAME%_MPSReports_%DATETIME%.CAB HISTORY ======= Version Changes 8.9.1.1 - Updated Microsoft contact information 8.9.0.1 - Add extensive SQL information gathering using OSQL.EXE and custom scripts 8.8.0.0 - Changed DCOM reports and added launch and access reports Added new WMI CPU reports 8.7.9.0 - Renamed some reports to group them better Changed some reports to use native WMI commands 8.7.8.0 - Minor script file changes 8.7.7.0 - Updated several Support Tools Fixed "Windows Update.log" report Added MEMSNAP.EXE 8.7.6.0 - Added iSCSI and iSNS reports - Added a running drivers report 8.7.5.0 - Updated several tools: Checksym, Devcon, FCINFO (signed) Added a new log file to collection, for Server 2003 SP2 8.7.4.0 - Removed command to open an Explorer windows in "Install Mode" 8.7.3.0 - Save Services registry key to .hiv file 8.7.2.0 - Copy .dmp files from %SystemRoot%\Cluster, if any exist 8.7.1.0 - Collect verbose Service Pack logs if they exist 8.7.0.0 - Compatible with Windows Vista when run with Admin. rights 8.6.0.0 - New version of FCINFO.EXE: 6.0.5716.0 8.5.1.0 - Fixed a minor issue with the FCINFO report 8.5.0.0 - Moved Cluster reports back to top-level directory - Now collect "MountedDevices" registry subkey - Added a Performance "stats" report 8.4.0.0 - Removed an FCINFO command that was causing hanging on some SANs 8.3.2.0 - Added Defrag Reports Collect NTBackup logs 8.2.4.0 - Updated QFECHECK from 6.1.0.0 to 6.2.29.0 Updated GPOTOOL from 6.0.4000.0 to 6.0.5250.0 (and platform specific versions) 8.2.3.2 - Fixed problem with DCDIAG report Fixed problem with spaces in .evt filenames 8.2.1.0 - Group Cluster and minidumps in folders in .cab file 8.2.0.0 - Group AD, Networking, and hotfix reports in sub-folders in .cab file Updated NETDIAG.EXE 8.1.1.0 - Check spooler service to see if it's running before running printer driver reports; skip if not running - Move hotfix logs to their own subfolder in .cab file - Added LDIFDE (RootDSE) report for DCs 8.1.0.0 - Added SQL logs 8.0.0.0 - Renamed package to MPSRPT_PFE to align with new organization structure - Added Signed Driver Report (DriverSigning.txt) 7.2.3.1 - Updated Readme file 7.2.3.0 - Added SC.EXE detailed services report 7.2.2.0 - Moved most registry reports to a report named "regentries.txt" 7.2.1.0 - Updated CLUSMPS.EXE to 1.7.0.5 7.2.0.0 - added NTFRSUTL.EXE, NETDOM.EXE, SUBINACL.EXE 7.1.1.0 - added SHOWPRIV.EXE, copy SECOOBE.log, Activate.log, Netlog.log (if exists), and NETSETUP.LOG 7.1.0.1 - added GPOTOOL.EXE and REPADMIN.EXE 7.1.0.0 - added NETDIAG.EXE verbose report 7.0.0.0 - added native IA64 and x64 self-extracting batch file and sub-report. The reason is that the MPSRPT_PFE.EXE is a native x86 package (Win32) and when extracted on an IA64 or x64 machine the scripts run in a 32-bit WOW. Having a native x64 or IA64 package allows calling native (to the OS) IA64 or x64 tools from the batch file, thereby allowing more thorough data collection on those platforms. - Removed x64 and IA64 VSSADMIN.EXE from package since these are now called natively. 6.4.1.0 - Added a check for IA-64 HBA drivers v1.03a7, which are incompatible with FCINFO.EXE 6.4.0.3 - Gather WMI logs 6.4.0.0 - Added DCDIAG.EXE 6.3.0.0 - Removed PERFDIAG - Added IA64 support 6.2.6.0 - Added Hyperthreading report of CPUs 6.2.5.0 - Added x64 version of VSSADMIN to overcome SysWoW64 file redirection 6.2.4.0 - Added USERDUMP reports if USERDUMP is installed 6.2.3.0 - Added DOSDEV for x64 and x86 for DOS devices report 6.2.2.0 - Collect PerfMon counter data using PERFDIAG.EXE 6.2.1.0 - Added VSSADMIN reports for XP and later - Added WHOAMI.EXE /all for Win2000 and later 6.2.0.0 - Changed specialty to "ASE" 6.0.0.8 - Added DISKMAP.EXE ResKit disk reporting Utility - Collect WindowsUpdate.log 6.0.0.7 - Added comprehensive AutoStart report - Added DEVCON.EXE, comprehensive hardware report - Gather kernel minidump files if they exist 6.0.0.6 - Added GPRESULT (super verbose) added SC.EXE detailed services report added TLIST.EXE process report added DCOM APP report from WMIC 6.0.0.2 - Added SECINSPECT.EXE, DMDIAG.EXE, FCINFO.EXE 6.0.0.1 - Minor fixes 6.0.0.0 - Changed from Alliance version to Advisory Services version Updated PSTAT.EXE for 2195 and above Updated CHECKSYM.EXE 5.1.0.0 - Major update. 5.0.1.1 - Bug fix - Setup.cmd fails if temp path has space in the name and no 8.3 equivalent name is available Updated enumprndrv.vbs 5.0.1.0 - Minor bug fix - Setup.cmd fails if CMD Autorun regkey changed the starting directory Added option to install and run from alternate folder Added NET START output to MISC.TXT 5.0.0.0 - Major version update Added Support for 64-bit platforms - Added 64-bit versions of QFECheck.exe and Checksym.exe - Inventory of ProgramFiles(x86) folder - Inventory of SysWOW64 folder - optimized tools cab by removing tools not needed based on processor architecture Added ENUMPRNDRV.VBS to get print driver information New version of DumpEVT.exe that supports skipping specific logs Added GETEVENTS.VBS to get CSV format event logs Fixed bug where W32Time registry dump was overwritten Added collection of DCPromo logs Added DrWtsn32.log summary file Moved most checksym data out of FULL mode into LITE mode Added Control key to RECOVERY.TXT report Replaced CLUSINFO.EXE with updated CLUSMPS.EXE Added more logging for file copy operations 4.8.1.0 - Updated Readme.txt to include more examples 4.8.0.0 - Collect Security Event log as CSV only in FULL mode Added /n option to NET CONFIG commands for better error handling IE Configuration data collection Collecting hotfix and SP installation log files Updated Checksym.EXE to v2.5.0.0 Updated DumpEVT.EXE Updated OEMInbox.exe Minor edits to README.TXT 4.7.0.4 - Updated Readme to refer to EULA Updated RPCDUMP.EXE to v1.1 Dumping TCP/IP regkey 4.7.0.3 - Minor bug fix - Checksym of Office files would overwrite SQL txt report Added registry dump of SQL Server keys 4.7.0.2 - Renamed to "Alliance" for web publication 4.7.0.1 - Renamed to "General" for web publication 4.7.0.0 - Now running Eventquery.vbs instead of DUMPEL on build 2600+ Minor changes to make it Windows 2003 compatible Added EXE name to progress report per customer request 4.6.0.0 - ClusMPS replaced by ClusInfo - New version of Checksym with no DLL dependencies 4.5.4.0 - Added new cluster Utility - collecting setup*.log files - improved Event log CSV dump code 4.5.3.0 - Cleaned up registry duMPS - added PSTAT back to get some basic performance data - Updated Checksym to v2.2.7.0 - Running IPSECCMD for Windows XP/.NET 4.5.2.0 - Added Exchange registry dump - Added Terminal Server registry dump 4.5.1.0 - Added WLBS to cluster section - Added IPSec info gathering - Now deleting report files after CAB creation - Updated to Checksym.exe v2.2.4.0 - Added rpcdump - minor cleanups 4.4.1.0 - added many new registry queries - consolidated some report files 4.3.1.1 - Refreshed some binaries 4.3.1.0 - Refreshed some binaries removed unneeded Checksym support DLLs Minor syntax improvements 4.2.1.1 - Refreshed some binaries Reordered some actions 4.2.1.0 - Added Cluster info Fixed some output formatting issues 4.1.1.0 - Added quiet and install modes Bugfix querying hotfix registry 4.0.1.0 - Total rewrite Now support Windows NT 4.0, Windows 2000, and Windows XP Uses newest version of Checksym and other tools 3.0 - Integrated Utility for Windows 2000 and Windows NT 4.0. Added reporting modes LITE and FULL. 2.0 - Switched from ZIP packaging to IEXPRESS packaging. Switched from FILEVER.EXE to CHECKSYM.EXE to gather file information. 1.0 - Initial version