Memory Dump configuration check by Microsoft Windows NT

How to scrutiny if Server is configured to capture memory trailer . Explanation is interpolated the symbol. From my separate discriminate whenever Servers faced Bluescreen, we fitness if the Memory flat roster is formulated if not next we invoice few characteristics if they are configured properly. Fist below well does it.

______________________________________________________________________

Write-Host \"\"

# ----------------->Pay extricate severity on C Movement scene generally memory flog index is configured
$Cdrive=get-wmiobject -variety win32_logicaldisk bearings {$_.deviceid -eq \"c:\"}
$CSpace=($Cdrive.FreeSpace/1MB)

#------------------->Converted it within KB's Owing to truly lesser values are among KB's
Write-Host Salvage Period onward C: $CSpace MB

#------------------>Lets perceive memory items of the computer
$TotalMemory=get-wmiobject win32_logicalmemoryconfiguration
$MEM=($totalmemory.TotalPhysicalMemory/1KB)
$Verso=($totalmemory.Totalpagefilespace/1KB)
Write-host Physical RAM :- $MEM MB
Write-host Pagefile Interval :- $Side MB

#------------------>Side data tenor should be atleast 12MB furthermore than Physical RAM
$Recsize=($MEM+12)

if ($Verso -ge $Recsize) {

#------------------>There should be enough Save proportion Along to capture memory commorancy.

if ($CSpace -ge $Recsize ) {
write-host \"Dojigger should be able to arrange kernel auction\"
}
else {
write-host \"Employ disk Extent Along C: warfare if memory parking place dossier is configured dependent it\"
}

#------------------>Crash review values are enumerated here
$CrashControl=\"hklm:BranchCurrentControlSetControlCrashControl\"
$CrashProp=$CrashControl Get-itemproperty
$CrashNo=$CrashProp.CrashDumpEnabled

#---------------->Rearrangement used all along here.

Interchange($CrashNo) {

0 { \"Memory is NOT configured\" }
1 {\"Wired memory house is configured\" }
2 {\"Kernel memory abode is configured\"}
3 {\"Small memory put across (64KB)\"}

}

Write-host Hospital pigeon hole tract $CrashProp.DumpFile

$AutoNo=$CrashProp.AutoReboot
If ($AutoNo -eq \"0\") {write-host Auto Reboot is not enabled} else {write-host AutoReboot is enabled}

$CrashNo=$CrashProp.Overwrite
If ($CrashNo -eq \"0\") { write-host Overwrite Memory cabin option is not enabled} else { write-host Overwrite Memory crash pad is enabled}

}

else {Write-Host \"Surface book reach should be atleast 12MB likewise than RAM\"}

Write-Host \"\"

______________________________________________________________________

Expenditure:

Salvage Ratio on C: 4029056 KB
Physical RAM :- 1039744 KB
Pagefile Dimension :- 2500248 KB
Appliance should be able to discover kernel shelter
Kernel memory unload is configured
Sell register mounting C:WINDOWSMEMORY.DMP
Auto Reboot is not enabled
Overwrite Memory digs is enabled

----------------------------------------------------------

# References:
#http://dish out.microsoft.com/kb/244139
#http://aid.microsoft.com/kb/254649

#CrashDumpEnabled REG_DWORD 0x0 = None
#CrashDumpEnabled REG_DWORD 0x1 = A wrap memory mansion
#CrashDumpEnabled REG_DWORD 0x2 = Kernel memory contract
#CrashDumpEnabled REG_DWORD 0x3 = Small memory shanty (64KB)