Microsoft Product Support Reporting Tool - Alliance Edition =========================================================== Version: v4.8.0.0 Build Date: 12/15/2003 PURPOSE: ======== The MPS Reporting Tool is utilized to gather detailed system status and configuration information. The data collected will assist the Microsoft Support Professional with fault isolation. The reporting tool DOES NOT make any registry changes or modifications to the operating system. Please see the section for PACKAGE CONTENTS and DIRECTORY STRUCTURE for details on what is copied to the system and what directories are made. NOTE: You may install and use an unlimited number of copies of MPSRPT_Alliance.EXE solely for the purpose of gathering system information necessary for Microsoft Product Support Services to provide you with technical support services requested by you. All other purposes are not supported by Microsoft. Please refer to the EULA for more detailed information regarding your usage rights. USAGE: ====== The MPS Reporting Tool is self-installing and will run on Windows NT 4.0, Windows 2000, and Windows XP. Every time you run MPSRPT_Alliance.EXE it will install itself, overwriting the previous installation then call MPSRpt.cmd to gather the reports. Use the /Q option to install the Tool without running the report. Example: MPSRPT_Alliance.EXE /Q The Tool has two reporting modes: Lite (default) and Full. Either mode can be run with the /Q Quiet-option. The Quiet-option reduces the ammount of user interaction with the Tool. Lite Mode - Executing MPSRPT_Alliance.EXE with no command line options run the Tool in LITE reporting mode. Examples: MPSRPT_Alliance.EXE MPSRPT_Alliance.EXE /C:"cmd /c Setup.cmd /Q" Full Mode - Full mode can take an extended period of time to gathering information and should only be run when directed by a Microsoft Support Professional. Examples: MPSRPT_Alliance.EXE /C:"cmd /c Setup.cmd /F" MPSRPT_Alliance.EXE /C:"cmd /c Setup.cmd /F /Q" The above examples show how to install the tool and run the reports with the options Full reporting and Quiet mode. The default behavior (using no command-line options) is Lite reporting in Verbose mode. If the Tool is already installed, you can execute the MPSRpt.cmd batch file from the Bin folder. Examples: MPSRpt.cmd MPSRpt.cmd /F MPSRpt.cmd /F /Q MPSRpt.cmd /Q For your convenience CAB file containing all of the reports will be created. Please send the cab file to the Microsoft Support Professional who is working on your support incident. Each time your run the Tool it will overwrite any existing report files. However, a new CAB file will be created. If you need to look at an older report you can extract it from the old CAB file. NOTES: ====== Average completion times for the MPS Reporting Tool Lite Mode are in the range of 5 to 15 minutes. If for some reason the data collection process is not completing try running the tool during non-peak usage times. Full Mode should only be run during non-peak usage times or on systems that are not under heavy load. To ensure that all of the data is collected properly, the user running the MPS Reporting Tool must have Administrative rights on the system. If you have any questions regarding the usage or operations of the Tool, consult with your Microsoft Support Professional. DIRECTORY STRUCTURE: ==================== %SystemRoot% Example - C:\WINNT \MPSReports MPS Reports root folder - can contain many support specific versions \Alliance Report output folder for the Alliance Edition of MPS Reports \Bin Tools folder - non-version specific \1381 Windows NT specific tools \2195 Windows 2000 specific tools \2600 Windows XP specific tools \Cab Output folder for the CAB files \Doc Folder containing Readme and other files PACKAGE CONTENTS: ================= File Size Date Version -------------------- --------- ---------- ------------ MPSTools.exe 455,889 07-08-2003 5.1.2600.0 Setup.cmd 3,818 07-08-2003 4.8.0.0 MPSTools.exe CONTENTS: ====================== File Size Date Version -------------------- --------- ---------- ------------ BIN\CHECKSYM.EXE 233,472 11-06-2003 2.5.0.0 BIN\CLUSINFO.EXE 57,344 02-22-2003 BIN\DUMPEL.EXE 53,248 05-22-2002 6.0.2600.1 BIN\DUMPEVT.EXE 28,672 09-10-2001 BIN\MPSRPT.CMD 53,816 07-08-2003 4.8.0.0 BIN\OEMINBOX.EXE 110,592 10-19-2001 BIN\QFECHECK.EXE 33,792 12-18-2001 5.1.2600.24 BIN\RPCDUMP.EXE 90,159 07-07-2003 BIN\1381\MAKECAB.EXE 81,168 11-30-1999 5.0.2147.1 BIN\1381\PSTAT.EXE 43,792 08-08-1996 4.0.1371.1 BIN\2195\PSTAT.EXE 9,488 11-30-1999 5.0.2134.1 BIN\2195\REG.EXE 49,424 09-25-1999 2.0.0.0 BIN\2600\PSTAT.EXE 8,704 08-17-2001 5.1.2600.0 Documentation Description -------------------- ------------------------------------------------ Doc\CHECKSYM.TXT Documentation for CheckSym.exe Doc\EULA.TXT End-User License Agreement Doc\Readme.txt Documentation for MPS Reporting tool (this file) Report files created in LITE mode: ================================== Event logs - The event logs are captured in both native and CSV format to allow analysis by different tools. %COMPUTERNAME%_Application.evt %COMPUTERNAME%_Security.evt %COMPUTERNAME%_System.evt %COMPUTERNAME%_EventApplication.CSV %COMPUTERNAME%_EventSecurity.CSV - only gathered in Full mode %COMPUTERNAME%_EventSystem.CSV The following event logs are only created on Windows 2000 or later and only if the specific service is installed. %COMPUTERNAME%_Directory_Service.evt %COMPUTERNAME%_DNS_Server.evt %COMPUTERNAME%_EventDirectory Service.CSV %COMPUTERNAME%_EventDNS Server.CSV %COMPUTERNAME%_EventFile Replication Service.CSV %COMPUTERNAME%_File_Replication_Service.evt Scheduled Job information - information from both the AT Scheduler and the Task Scheduler %COMPUTERNAME%_SCHEDULE.[CSV/TXT] %COMPUTERNAME%_SCHEDLGU.TXT System Startup and Crash Recovery data - copies of the BOOT.INI, Autoexec.NT and Config.NT are collected as well as the registry settings that control application and system crash handling %COMPUTERNAME%_BOOT_INI.TXT %COMPUTERNAME%_CONFIG_AUTO.TXT %COMPUTERNAME%_RECOVERY.TXT Cluster Information - gathers information about MSCS and WLBS if these services are configured on the system. %COMPUTERNAME%_WLBS.TXT - configuration of the Windows Load Balancing Service %COMPUTERNAME%_CLUSTERINFO.TXT - configuration state and resource information from CLUSTER.EXE %COMPUTERNAME%_Cluster_MPS_Dependencies.txt - Cluster Resource Dependency trees from Clusinfo.exe %COMPUTERNAME%_Cluster_MPS_RES2GUID.txt - Maps of Resource Name to Guid from Clusinfo.exe %Computername%_Cluster_MPS_Information.txt - Alliance configuration information from Clusinfo.exe %COMPUTERNAME%_CLUSTER_REGISTRY.HIV - Cluster service registry hive %COMPUTERNAME%_CLUSTERFILES.[CSV/TXT] - file version information for Cluster Service binaries %COMPUTERNAME%_CLUSTER.LOG - cluster log file %COMPUTERNAME%_CLUSTER_CLCFGSRV.LOG - ClCfgSrv.log file %COMPUTERNAME%_CLUSTER_OBJ.TXT - cluster.obj file %COMPUTERNAME%_CLUSTER_OML.TXT - cluster.oml file %COMPUTERNAME%_CLUSTER_CHKDSK*.LOG - copy of all cluster chkdsk logs System service configuration and trace settings - registry settings for key system components %COMPUTERNAME%_TRACING.TXT - Settings for LSA, Winlogon, Netlogon, NTDS, NTFRS, RAS and other misc. settings. %COMPUTERNAME%_IPSEC.TXT - Settings for IPSEC (Windows 2000 or later only) Hotfix information - information about hotfix install history %COMPUTERNAME%_HOTFIX.TXT System Diagnostics - output from the Windows diagnotics tools %COMPUTERNAME%_MSINFO32.NFO - Windows 2000 or later diagnotics report %COMPUTERNAME%_WINMSD.TXT - Windows NT 4.0 diagnostics report %COMPUTERNAME%_SYSINFO.TXT - Windows XP/.NET system information %COMPUTERNAME%_PSTAT.TXT - Process Status output show some performance data for the running processes Network configuration - various network configuration and current state information %COMPUTERNAME%_NETINFO.TXT %COMPUTERNAME%_MISC.TXT Printer configuration - inventory and configuration of installed printer drivers %COMPUTERNAME%_PRINTDRIVERS.TXT - installed driver report %COMPUTERNAME%_PRINTKEY.TXT - Print Spooler registry hive %COMPUTERNAME%_SPOOL.[CSV/TXT] - print driver file infirmation Terminal Server data - lists of users, processes and connections available on a Terminal Server %COMPUTERNAME%_TERMSERV.TXT Process Information - inventory of the currently running processes and device drivers on the system %COMPUTERNAME%_PROCESS.[CSV/TXT] %COMPUTERNAME%_DRIVERS.[CSV/TXT] System File Information - subset inventory of the most important system files %COMPUTERNAME%_IEFILES.[CSV/TXT] %COMPUTERNAME%_SYSTEM32.[CSV/TXT] Setup log files - Log files created by MSI when applications are installed %COMPUTERNAME%_SETUPACT.LOG - Windows setup actions log %COMPUTERNAME%_SETUPAPI.LOG - Windows setup API log %COMPUTERNAME%_SETUPERR.LOG - Windows setup error log %COMPUTERNAME%_SVCPack.log - Service Pack installation log %COMPUTERNAME%_dahotfix.log - MDAC hotfix installation log %COMPUTERNAME%_Q*.log - hotfix installation log %COMPUTERNAME%_KB*.log - hotfix installation log Internet Explorer Information - log files and registry settings for IE %COMPUTERNAME%_IESETUPLOG.TXT - Installation log %COMPUTERNAME%_IEBRNDLOG.TXT - Branding log %COMPUTERNAME%_IEPOLICYREG.TXT - Dump of policy registry keys for IE %COMPUTERNAME%_Signup.Log - ISP signup log %COMPUTERNAME%_Install.ins - Custom installation log Report files created in Full Mode: ================================== Full Mode creates all of the reports in Lite Mode and adds the following extra reports: System File Information - inventory of all application files and more system files not collected in Lite Mode %COMPUTERNAME%_PROGFILES.[CSV/TXT] - inventory of the %ProgramFiles% folder %COMPUTERNAME%_SYSROOT.[CSV/TXT] - inventory of %SYSTEMROOT% BackOffice File Information - inventory of the BackOffice applications installed on the system %COMPUTERNAME%_EXCH.[CSV/TXT] - Exchange files %COMPUTERNAME%_EXCHREG.TXT - Exchange registry keys %COMPUTERNAME%_IIS.[CSV/TXT] - Internet Information Server files %COMPUTERNAME%_ISA.[CSV/TXT] - Internet Security & Accelleration Server file %COMPUTERNAME%_SMS.[CSV/TXT] - Systems Management Server files %COMPUTERNAME%_SNA.[CSV/TXT] - SNA/Host Interagration Server files %COMPUTERNAME%_SQL.[CSV/TXT] - SQL Server files %COMPUTERNAME%_SQLREG.TXT - SQL Server registry keys Microsoft Office File Information - inventory of the Office applications installed on the system %COMPUTERNAME%_MSOFFICE.CSV Other files created: ==================== Progress Report - log file showing the progress of the Tool. Used by the Microsoft Support Professional to debug problems running the Tool %COMPUTERNAME%_PROGRESS.TXT CAB files - Cabinet file containing all of the reports CABDIRECT.[DDF/TXT] - used to create the CAB file - deleted after CAB is created CABERRORS_%DATETIME%.TXT - deleted if no errors occurred during CAB creation %COMPUTERNAME%_MPSReports_%DATETIME%.CAB HISTORY: ======== Version Changes 4.8.0.0 - Collect Security Event log as CSV only in FULL mode Added /n option to NET CONFIG commands for better error handling IE Configuration data collection Collecting hotfix and SP installation log files Updated Checksym.EXE to v2.5.0.0 Updated DumpEVT.EXE Updated OEMInbox.exe Minor edits to README.TXT 4.7.0.4 - Updated Readme to refer to EULA Updated RPCDUMP.EXE to v1.1 Dumping TCP/IP regkey 4.7.0.3 - Minor bug fix - Checksym of Office files would overwrite SQL txt report Added registry dump of SQL Server keys 4.7.0.2 - Renamed to "Alliance" for web publication 4.7.0.1 - Renamed to "General" for web publication 4.7.0.0 - Now running Eventquery.vbs instead of DUMPEL on build 2600+ Minor changes to make it Windows 2003 compatible Added EXE name to progress report per customer request 4.6.0.0 - Clusmps replaced by ClusInfo - New version of Checksym with no DLL dependencies 4.5.4.0 - Added new cluster tool - collecting setup*.log files - improved Event log CSV dump code 4.5.3.0 - Cleaned up registry dumps - added PSTAT back to get some basic performance data - Updated Checksym to v2.2.7.0 - Running IPSECCMD for Windows XP/.NET 4.5.2.0 - Added Exchange registry dump - Added Terminal Server registry dump 4.5.1.0 - Added WLBS to cluster section - Added IPSec info gathering - Now deleting report files after CAB creation - Updated to Checksym.exe v2.2.4.0 - Added rpcdump - minor cleanups 4.4.1.0 - added many new registry queries - consolidated some report files 4.3.1.1 - Refreshed some binaries 4.3.1.0 - Refreshed some binaries removed unneeded Checksym support DLLs Minor syntax improvements 4.2.1.1 - Refreshed some binaries Reordered some actions 4.2.1.0 - Added Cluster info Fixed some output formatting issues 4.1.1.0 - Added quiet and install modes Bugfix querying hotfix registry 4.0.1.0 - Total rewrite Now support Windows NT 4.0, Windows 2000, and Windows XP Uses newest version of Checksym and other tools 3.0 - Integrated tool for Windows 2000 and Windows NT 4.0. Added reporting modes LITE and FULL. 2.0 - Switched from ZIP packaging to IEXPRESS packaging. Switched from FILEVER.EXE to CHECKSYM.EXE to gather file information. 1.0 - Initial version