应用手册 - windows10 通过sdk分析蓝屏 - 《IT 运维》

配置swap、dump文件
- 自定义powershell 配置 swap的函数
- 配置dump文件
  - 控制面板\系统和安全\系统->高级->设置->转储文件
下载win10 SDK

配置swap、dump文件

自定义powershell 配置 swap的函数

创建下述名为AdjustVirtualMemoryPagingFileSize.ps1文件

#--------------------------------------------------------------------------------- 
#The sample scripts are not supported under any Microsoft standard support 
#program or service. The sample scripts are provided AS IS without warranty  
#of any kind. Microsoft further disclaims all implied warranties including,  
#without limitation, any implied warranties of merchantability or of fitness for 
#a particular purpose. The entire risk arising out of the use or performance of  
#the sample scripts and documentation remains with you. In no event shall 
#Microsoft, its authors, or anyone else involved in the creation, production, or 
#delivery of the scripts be liable for any damages whatsoever (including, 
#without limitation, damages for loss of business profits, business interruption, 
#loss of business information, or other pecuniary loss) arising out of the use 
#of or inability to use the sample scripts or documentation, even if Microsoft 
#has been advised of the possibility of such damages 
#--------------------------------------------------------------------------------- 
#requires -Version 2.0
Function Set-OSCVirtualMemory
{
<#
     .SYNOPSIS
        Set-OSCVirtualMemory is an advanced function which can be used to adjust virtual memory page file size.
    .DESCRIPTION
        Set-OSCVirtualMemory is an advanced function which can be used to adjust virtual memory page file size.
    .PARAMETER  <InitialSize>
        Setting the paging file's initial size.
    .PARAMETER  <MaximumSize>
        Setting the paging file's maximum size.
    .PARAMETER  <DriveLetter>
        Specifies the drive letter you want to configure.
    .PARAMETER  <SystemManagedSize>
        Allow Windows to manage page files on this computer.
    .PARAMETER  <None>        
        Disable page files setting.
    .PARAMETER  <Reboot>        
        Reboot the computer so that configuration changes take effect.
    .PARAMETER  <AutoConfigure>
        Automatically configure the initial size and maximumsize.
    .EXAMPLE
        C:\PS> Set-OSCVirtualMemory -InitialSize 1024 -MaximumSize 2048 -DriveLetter "C:","D:"
        Execution Results: Set page file size on "C:" successful.
        Execution Results: Set page file size on "D:" successful.
        Name            InitialSize(MB) MaximumSize(MB)
        ----            --------------- ---------------
        C:\pagefile.sys            1024            2048
        D:\pagefile.sys            1024            2048
        E:\pagefile.sys            2048            2048
    .LINK
        Get-WmiObject
        http://technet.microsoft.com/library/hh849824.aspx
#>
    [cmdletbinding(SupportsShouldProcess=$true,DefaultParameterSetName="SetPageFileSize")]
    Param
    (
        [Parameter(Mandatory=$true,Position=0,ParameterSetName="SetPageFileSize")]
        [Alias('is')]
        [Int32]$InitialSize,
        [Parameter(Mandatory=$true,Position=1,ParameterSetName="SetPageFileSize")]
        [Alias('ms')]
        [Int32]$MaximumSize,
        [Parameter(Mandatory=$true,Position=2)]
        [Alias('dl')]
        [String[]]$DriveLetter,
        [Parameter(Mandatory=$true,Position=3,ParameterSetName="None")]
        [Switch]$None,
        [Parameter(Mandatory=$true,Position=4,ParameterSetName="SystemManagedSize")]
        [Switch]$SystemManagedSize,
        [Parameter(Mandatory=$false,Position=5)]
        [Switch]$Reboot,
        [Parameter(Mandatory=$true,Position=6,ParameterSetName="AutoConfigure")]
        [Alias('auto')]
        [Switch]$AutoConfigure
    )
    If($PSCmdlet.ShouldProcess("Setting the virtual memory page file size"))
    {
        Foreach($DL in $DriveLetter)
        {        
            If($None)
            {
                $PageFile = Get-WmiObject -Query "Select * From Win32_PageFileSetting Where Name='$DL\\pagefile.sys'" -EnableAllPrivileges
                If($PageFile -ne $null)
                {
                    $PageFile.Delete()
                }
                Else
                {
                    Write-Warning """$DL"" is already set None!"
                }
            }
            ElseIf($SystemManagedSize)
            {
                $InitialSize = 0
                $MaximumSize = 0
                Set-PageFileSize -DL $DL -InitialSize $InitialSize -MaximumSize $MaximumSize
            }                        
            ElseIf($AutoConfigure)
            {
                $InitialSize = 0
                $MaximumSize = 0
                #Getting total physical memory size
                Get-WmiObject -Class Win32_PhysicalMemory | Where-Object{$_.DeviceLocator -ne "SYSTEM ROM"} | `
                ForEach-Object{$TotalPhysicalMemorySize += [Double]($_.Capacity)/1GB}
                <#
                By default, the minimum size on a 32-bit (x86) system is 1.5 times the amount of physical RAM if physical RAM is less than 1 GB, 
                and equal to the amount of physical RAM plus 300 MB if 1 GB or more is installed. The default maximum size is three times the amount of RAM, 
                regardless of how much physical RAM is installed. 
                #>
                If($TotalPhysicalMemorySize -lt 1)
                {
                    $InitialSize = 1.5*1024
                    $MaximumSize = 1024*3
                    Set-PageFileSize -DL $DL -InitialSize $InitialSize -MaximumSize $MaximumSize
                }
                Else
                {
                    $InitialSize = 1024+300
                    $MaximumSize = 1024*3
                    Set-PageFileSize -DL $DL -InitialSize $InitialSize -MaximumSize $MaximumSize
                }
            }
            Else
            {
                Set-PageFileSize -DL $DL -InitialSize $InitialSize -MaximumSize $MaximumSize
            }
            If($Reboot)
            {
                Restart-Computer -ComputerName $Env:COMPUTERNAME -Force
            }
        }
        #get current page file size information
        Get-WmiObject -Class Win32_PageFileSetting -EnableAllPrivileges|Select-Object Name, `
        @{Name="InitialSize(MB)";Expression={if($_.InitialSize -eq 0){"System Managed"}else{$_.InitialSize}}}, `
        @{Name="MaximumSize(MB)";Expression={if($_.MaximumSize -eq 0){"System Managed"}else{$_.MaximumSize}}}| `
        Format-Table -AutoSize
    }
}
Function Set-PageFileSize
{
    Param($DL,$InitialSize,$MaximumSize)
    #The AutomaticManagedPagefile property determines whether the system managed pagefile is enabled. 
    #This capability is not available on windows server 2003,XP and lower versions.
    #Only if it is NOT managed by the system and will also allow you to change these.
    $IsAutomaticManagedPagefile = Get-WmiObject -Class Win32_ComputerSystem |Foreach-Object{$_.AutomaticManagedPagefile}
    If($IsAutomaticManagedPagefile)
    {
        #We must enable all the privileges of the current user before the command makes the WMI call.
        $SystemInfo=Get-WmiObject -Class Win32_ComputerSystem -EnableAllPrivileges
        $SystemInfo.AutomaticManagedPageFile = $false
        [Void]$SystemInfo.Put()
    }
    Write-Verbose "Setting pagefile on $DL"
    #configuring the page file size
    $PageFile = Get-WmiObject -Class Win32_PageFileSetting -Filter "SettingID='pagefile.sys @ $DL'"
    Try
    {
        If($PageFile -ne $null)
        {
            $PageFile.Delete()
        }
            Set-WmiInstance -Class Win32_PageFileSetting -Arguments @{name="$DL\pagefile.sys"; InitialSize = 0; MaximumSize = 0} `
            -EnableAllPrivileges |Out-Null
            $PageFile = Get-WmiObject Win32_PageFileSetting -Filter "SettingID='pagefile.sys @ $DL'"
            $PageFile.InitialSize = $InitialSize
            $PageFile.MaximumSize = $MaximumSize
            [Void]$PageFile.Put()
            Write-Host  "Execution Results: Set page file size on ""$DL"" successful."
            Write-Warning "Pagefile configuration changed on computer '$Env:COMPUTERNAME'. The computer must be restarted for the changes to take effect."
    }
    Catch
    {
        Write-Host "Execution Results: No Permission - Failed to set page file size on ""$DL"""
    }
}

导入函数:
import /path/AdjustVirtualMemoryPagingFileSize.ps1

注:如需开机启动可将其置放在C:\Users\user\Documents\WindowsPowerShell\ 路径下,powershell将开机自动加载改脚本.

示例:
Set-OSCVirtualMemory -InitialSize 1024 -MaximumSize 2048 -DriveLetter "C:","D:"
参考

配置dump文件

控制面板\系统和安全\系统->高级->设置->转储文件

下载win10 SDK

下载链接
win10 SDK 安装包中包含WinDbg

WinDbg是在windows平台下，强大的用户态和内核态调试工具。它能够通过dmp文件轻松的定位到问题根源，可用于分析蓝屏、程序崩溃（IE崩溃）原因，是我们日常工作中必不可少的一个有力工具，学会使用它，将有效提升我们的问题解决效率和准确率。

运行WinDbg软件，然后按【Ctrl+S】弹出符号表设置窗
将符号表地址：SRVC:\Symbolshttp://msdl.microsoft.com/download/symbols 粘贴在输入框中，点击确定即可。
使用【Ctrl+D】快捷键来导入一个dmp文件
键入!analyze -v

案例参考