Welcome to MSDN Blogs Sign in | Join | Help

March 2008 - Posts

Debugging a bluescreen at home

Hi, my name is Chad. I work as an escalation engineer for Microsoft’s OEM support team. A while back, I encountered an interesting crash on one of my computers at home, and I thought I’d post about how I debugged it. This particular machine had been humming Read More...
Posted Friday, March 28, 2008 3:43 PM by ntdebug | 15 Comments

NonPagedPool Depletion

I recently was engaged on an issue where a server was depleting NonPagedPool over a period of a few days. Ordinarily, we would just use a tool like PoolMon to identify the offending pool tag and then find the driver that uses that pool tag using the method Read More...
Posted Wednesday, March 26, 2008 12:57 PM by ntdebug | 1 Comments
Filed under: , ,

Wanted: Windows Internals subject matter experts

Microsoft is looking for five Windows Internals subject matter experts to come work on a very special five to eight day project on the Redmond campus during the month of May 2008. Candidates must have good communications skills, be non Microsoft employees, Read More...
Posted Friday, March 21, 2008 1:47 AM by ntdebug | 3 Comments
Filed under: , ,

The default interactive desktop heap size has been increased on 32-bit Vista SP1

This is going to be a short blog post, but considering the amount of feedback we’ve received on the our two previous desktop heap posts , I think this is worth blogging about. 32-bit Vista SP1 and 32-bit Windows Server 2008 both have a new value for the Read More...
Posted Thursday, March 20, 2008 5:23 PM by ntdebug | 5 Comments
Filed under: ,

How to find the owner of a Named Pipe

This is a follow-up on the LPC hang blog . The same hang troubleshooting techniques apply to this, but when a named pipe is involved you’ll have to use a slightly different method to following the chain from a client application to the server application. Read More...
Posted Tuesday, March 18, 2008 2:09 PM by ntdebug | 1 Comments
Filed under: , , ,

Disassemble the MBR

UPDATE: This is why we *LOVE* our readers! After posting a 32-bit disassembly of 16-bit MBR code, I was gently informed of my misstep by three sharp-eyed readers. I’ve corrected the original post below. Thanks go out to Ramon Sola, Jeroen Frijters and Read More...
Posted Thursday, March 06, 2008 4:28 PM by ntdebug | 1 Comments
Filed under: , , ,
 
Page view tracker