Windows Memory Dump Settings on Windows 10/8/7

In Windows 8, Microsoft has introduced a new Memory dump option called Automatic Memory Dump. This is the default option set in the operating system. Windows 10 introduced a new dump file type called Active Memory Dump.

For those, you don’t know, on Windows 7 we have Minidump, Kernel Dump, and Complete Memory Dump. You might be wondering why Microsoft chose to create this new Memory dump setting?

Well, according to Robert Simpkins, Senior Support Escalation Engineer, Automatic Memory Dump is to create support for “System Managed” page file configuration. The System Managed page file configuration is responsible for managing the page file size – therefore it avoids over-sizing or under-sizing your page file. This option is introduced mainly for PC’s that run SSD’s, which tend to have a smaller size, but a huge amount of RAM.

Windows Memory Dump Settings

The main advantage of “Automatic Memory Dump” is that it will allow Session Manager sub-system process to automatically allow it to reduce the Page file to a size smaller than the size of RAM. For those who don’t know, Session Manager Subsystem is responsible for initializing system environment and starting up services and processes needed for users to log in. It basically sets up the page files for virtual memory and starts up the winlogon.exe process.

If you want to change Automatic Memory Dump Settings here is how you can do it. Press Win + X and click on System. Next click on “Advance System Settings”.

image

Under Start up and Recovery, click on Settings.

image

There you can see a drop-down menu where it says “Write debugging information”.

Windows Memory Dump Settings

Here you can select the option you want. The options offered are:

  • No memory dumps
  • Small memory dump
  • Kernel memory dump
  • Complete memory dump
  • Automatic memory dump. Added in Windows 8.
  • Active Memory Dump. Added in Windows 10.

The location of the Memory Dump file is at %SystemRoot%\MEMORY.DMP.

If you are using SSD then it’s best to leave it at “Automatic Memory Dump”; but if you are in need of a crash dump file then it’s best to set it to “Small memory dump” as this way you can, if you wish, send it to someone to take a look at.

In some cases we may need to increase the page file size to more than that of the RAM, to fit a complete memory dump. In such cases, we can create a registry key under

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl

called “LastCrashTime”.

This will automatically increase the size of the page file. To reduce it, later on, you can just delete the key.

Windows 10 introduced a new dump file type called Active Memory Dump. It contains only the essentials and is, therefore, smaller in size.

I haven’t got a chance to test it yet, but I have created this key and have been monitoring the page file size. I know sooner or later I will get a Bugcheck error. Then I’ll test it out.

You can analyze Windows Memory Dump .dmp files with WhoCrashed. Also, read about Machine Memory Dump Collector.

Posted by on , in Category Windows with Tags

Shyam aka “Captain Jack” is a Microsoft MVP alumnus and a Windows Enthusiast with an interest in Advanced Windows troubleshooting. Suggestions made and opinions expressed by him here are his personal one’s and not of his current employers. He blogs at captaindbg.com.