Microsoft Product Support Reporting Tool - SUS Edition ------------------------------------------------------- Version: 5.2.2112.3 Build Date: 09/24/2004 ------------------------------------------------------- SUPPORT LIMITATIONS: ======================= You may use an unlimited number of copies of MPSReports.exe solely for the purpose of gathering system information necessary for Microsoft Product Support Services to provide you with technical support services requested by you. All other purposes are not supported by Microsoft. WHAT IS HAPPENING: ======================= When you run this tool you will see a Command Window start up. The tool runs in that Window. You will then see this file open up in a text editor. When the tool is done you will see an Explorer Window open up. If you are on Windows XP, Windows 2000, or Windows Server 2003 in the Explorer Window is the .CAB file that you need to send via email to your Microsoft Support Professional. PURPOSE: ======================= The MPS Reporting Tool for Microsoft Software Update Services is utilized to gather detailed information regarding a systems current SUS Server and Client configuration. The data collected will assist the Microsoft Support Professional with fault isolation. The reporting tool DOES NOT make any registry changes or modifications to the operating system. Please see the section for PACKAGE CONTENTS and DIRECTORY STRUCTURE for details on what is copied to the system and what directories are made. USAGE: ======================= This package supports Windows XP, Windows 2000, and Windows Server 2003. On execution of the package the product type is detected to determine which commands will be utilized to collect information. NOTES: ======================= Average completion times for the MPS Reporting Tool are in the range of 5 to 20 minutes. If for some reason the data collection process is not completing try running the tool during non-peak usage times. Some common areas that prevent data collection to complete or take an excessive amount of time: 1. A corrupted Event Log can hang DUMPEL.EXE. 2. Very large event logs can take a long time to dump. The Security log can become very large if Auditing is enabled. 3. Many of the utilities require that RPC (Remote Procedure Call) be operating at some capacity. 4. Disk/Controller problems can prevent inventory of various files hanging or slowing down the process. 5. If Quick Edit is enabled, if you select any text in the "Command" Windows it will effectively pause the MPS Reports. Press the "ESC" key to exit out and let the MPS Reports continue Utilize the %ComputerName%_PROGRESS.TXT file to determine which process is not completing. Correcting any issue that prevents the MPS Reports from completing in some cases resolves the issue that prompted the need for the utility to be run. It is required that the currently logged on user have Administrative rights in order to allow for proper operations of the MPS Reporting Tool. If you have any questions regarding the usage or operations of the MPS Reporting Tool consult with the Microsoft Support Professional you are working with. MPSRPT.CMD Switches: ======================= Optional parameters: /d (Driveletter:) - Places MPS Reports output in the specified drive Example: MPSRpt.cmd /d Z: The above command places the report output into Z:\MPSReports\msus\ If no optional parameters used, run with default options and place output in %systemRoot%\MPSReports\msus\ ERRORS: ======================= - If you get a notice that an application is trying to access your email then please stop Outlook, and relaunch the MPS Reports. - If the /d switch is used, but no driveletter specified, you will get the following error: Error: Invalid drive letter or no output drive specified "/d" parameter used, please specify an output drive letter. PACKAGE CONTENTS: ======================= MPSRpt.cmd - Batch file Command script used to create all the reports 2000.cmd - Batch file containing all commands to run if machine is running Windows 2000. 2003.cmd - Batch file containing all commands to run if machine is running Windows 2003. XP.cmd - Batch file containing all commands to run if machine is running Windows XP. Finish.cmd - Batch file containing all commands necessary to build the cab file Bitsadmin.exe - Version 6.0.2600.0 - BITS Administration Utility to determine status of the BITS download queue Cabarc.exe - Version 1.00.0601 - Utility to compress all files into a single cab file. CheckSym.exe - Version 5.0.2139.1 - Utility that gathers version and symbol information from executable files. Checksym.txt - Readme file for CHECKSYM.EXE Checksym_EULA.RTF - EULA for Checksym.exe CHOICE.EXE - Version 5.2.3765.0 - Utility to allow user to include/exclude MSINFO32 report collection DUMPEL.EXE - Version 1.0 - Resource Kit utility to dump the event logs to a text file. DUMPEVT.EXE - Version 1.0 - Utility that dumps Event Logs in EVT format. EULA.txt - End User License Agreement GetVDirPath.vbs - Returns the value of the 'Path' property for the specified VDir. GETVER.EXE - Version 1.0 - Utility used to determine version of Windows OS running. GPRESULT.EXE - Version 5.0.21841 - Resource Kit utility to dump the Group Policies on this box. IISDump.exe - Version 2003.7.22.8 - IIS Debug Toolkit util to gather IIS, Metabase, and module information ISAInfo.vbs - Version 1.9.3 - Gathers ISA status and configuration proxycfg.exe - Version 5.2.3790.0 - Winhttp proxy configuration and status tool QFECHECK.EXE - Version 5.00.2195.3137 - Resource Kit utility to list installed hotfixes (Windows 2000 only). Readme.txt - This file REG.EXE - Version 2.0.0.0 - Resource Kit utility to dump registry values. SC.exe - Version 5.1.2600.0 - Resource Kit Service query tool to determine the state of all services. REPORTS GATHERED: ======================= Folders: ======================= HotfixInstallLogs - Folder containing all hotfix installation log files W3SVC-IISLogs - Folder containing all W3SVC IIS logs IISDUMP - IISDump output folder containing: MBSchema.xml, MetaBase.xml, sysinfo xml Files: ======================= ActiveSetupInstalledComp.txt - Registry entries for all Active Setup components installed. Application.evt - Application Event log in .EVT format. Application.txt - Application Event log in .TXT format. ApprovedItems.txt - Microsoft Software Update Services approved items listing approveschema.xml - Microsoft Software Update Services approval schema Bits_wuaudnld_files.txt - Directory listing of %ProgramFiles%\WindowsUpdate\wuaudnld.tmp\cabs BitsAdmin.txt - BITS service and queued job(s) status ClassRegistration.txt - Output of Registration check of all critical update dlls. Env.txt - Environment variables configured on target machine FileList_SoftwareDistribution.txt- Directory tree view of the %SystemRoot%\SoftwareDistribution folder FileList_SUS_Directory.txt - Directory tree view of the SUS installation folder. FileList_WindowsUpdate.txt - Directory tree view of the %ProgramFiles%\WindowsUpdate folder GPResult.txt - Log from a run of the GP Result command to tell which policies were applied to the machine. HCUpdate.log - Hardware Compatibility Update Log. History-approve.xml - Microsoft Software Update Services approval history History-sync.xml - Microsoft Software Update Services synchronization history HKLM_Policies_WindowsUpdate.txt - Registry entries: HKLM\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate HKLM_WindowsUpdate.txt - Registry entries: HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update Hotfix.txt - Registry entries: HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ (Hotfix, Updates, Uninstall) IIS*.log - IIS Log file for whichever version is installed on the machine. IISLockdown_Oblt-log.log - IISLockdown Configuration Log (used to undo previous IIS Lockdown configuration) Internet_Settings_Key.txt - Registry entries for the Internet Settings information provided through IE. ISAInfo.txt - ISA configuration (only gathered if ran on an ISA server) item.xml - Lists and provides additional information about updates detected by Automatic Updates iuhist.xml - Detailed history of updates installed on the system either by Automatic Updates or Windows Update MBSchema.xml - IISDump.exe report: Metabase Information MetaBase.xml - IISDump.exe report: Metabase Schema Information NI.txt - Network Statistics log. PingSUSServer.txt - Output txt file: Ping of the configured Sus server. Process.csv - Detailed List of running rocesses and modules/files loaded for each process. (csv format) Process.txt - Detailed List of running rocesses and modules/files loaded for each process. (txt format) PROGRESS.TXT - Progress Log that MPS Reports updates to track how far it has gotten. ProxyCFG_WinHTTP.txt - Winhttp proxy configuration status Qfecheck.txt - List of installed hotfixes SC_Services_Output.txt - Status output and details on each service installed on the system Security.evt - Security Event Log in .EVT format. Security.txt - Security Event Log in .TXT format. Services_Key.hiv - Registry Hive: HKLM\SYSTEM\CurrentControlSet\Services Services_Key.txt - Registry entries: HKLM\SYSTEM\CurrentControlSet\Services SessionManager_Key.txt - Registry entries: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager Settings.txt - Microsoft Software Update Services settings SetupApi.log - Setup Log file. Setup_key.txt - Registry entries: HKLM\Software\Microsoft\Windows\CurrentVersion\Setup (for ‘Sticky Updates’) STARTUP.txt - Listing of all autmatic startup processes (from start menu, run key, script, etc) SvcRegistration.txt - Registry entries: HKLM\SYSTEM\CurrentControlSet\Services\wuauserv registry key sysinfo_nnn-nnn.xml - IISDump.exe report: Module Information from system and inetsrv System.evt - System Event Log in .EVT format. System.txt - System Event Log in .TXT format. System32_DLL.csv - Version and checksum of DLL files in the System32 directory (comma delimited). System32_DLL.txt - Version and checksum of DLL files in the System32 directory. System32_EXE.csv - Version and checksum of EXE files in the System32 directory (comma delimited). System32_EXE.txt - Version and checksum of EXE files in the System32 directory. Trace_Agent.log - TraceLogging Enabled: Core agent logging Trace_AU.log - TraceLogging Enabled: Automatic Update component- responsible for automated detection/install Trace_AUclient.log - TraceLogging Enabled: Wuauclt.exe - performs install/uninstall, houses datastore, and displays notification icon & UI. Trace_CDM.log - TraceLogging Enabled: CDM Trace_COMAPI.log - TraceLogging Enabled: API layer that all 3rd party code (including the web site) calls into to access the agent Trace_DataStore.log - TraceLogging Enabled: Component that stores metadata, other update information, and most of agent's state on the client Trace_DownloadManager.log - TraceLogging Enabled: Component responsible for file downloads for agent (EULA & payload files) Trace_Driver.log - TraceLogging Enabled: Driver related information Trace_EEHandler.log - TraceLogging Enabled: Used by the modules that evaluate applicability rules Trace_Handler.log - TraceLogging Enabled: Used by the modules that talk to the various installers for install / uninstall of updates Trace_Misc.log - TraceLogging Enabled: Miscellaneous log data related to Au client Trace_Parser.log - TraceLogging Enabled: Component that parses the update metadata xml blob that comes from the server Trace_PT.log - TraceLogging Enabled: Protocol Talker makes appropriate sequence of web service calls to server and processes responses Trace_Reporter.log - TraceLogging Enabled: Reporting component, which sends client install/detection/etc status to the server Trace_Setup.log - TraceLogging Enabled: Output by the WU client setup Trace_SvcShared.log - TraceLogging Enabled: Shared services information Trace_WuWeb.log - TraceLogging Enabled: Used by the activeX control used by the WU web site. (It wraps the COMAPI.) Uninstall_KEY.txt - Registry entries: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall Updates_Key.txt - Registry entries: HKLM\Software\Microsoft\Updates\ urllog.dat - Cached information of last time the AU client connected to WU. urlscan.ini.txt - URLScan.ini file urlscanlogs.txt - All URLScan logs vminst.log - Log from Virtual Machine installation. Windows_Update_v4.log - Windows Update log file from version 4 AU client WindowsUpdate_v5.log - Windows Update log file from version 5 AU client Winmsd.nfo - NFO format of Winmsd. Winmsd.txt - TXT format of Winmsd. WWWRoot_Vdirs.txt - Listing of all IIS virtual directories and locations DIRECTORY STRUCTURE: ======================= %SystemRoot%\MPSReports\MSUS\Bin\Reports\Cab %SystemRoot% | +---MPSReports | \---msus | +---bin | | \---history | \---Reports | +---IISDump (Collected on IIS Servers only) | +---HotfixInstallLogs | +---W3SVC-IISLogs (Collected on IIS Servers only) | +---cab | | \---THE_MPSRPT_SUS | | +---IISDump (Collected on IIS Servers only) | | +---HotfixInstallLogs | | +---W3SVC-IISLogs (Collected on IIS Servers only) ADDITIONAL INFORMATION: ======================= When data collection is complete, a CAB file named %ComputerName%_MPSRPT_SUS.CAB will be generated in the %SystemRoot%\MPSReports\MSUS\Bin\Reports\Cab directory. The CAB file will contain the reports generated by the MPS Reporting Tool. Please send the cab file to the Microsoft Support Professional who is working on your support incident. CHECKSYM: ======================= For the CHECKSYM reports for each BackOffice Product, the CSV version of the file will only be created if that BackOffice product is installed. HISTORY: ======================= Version Changes ============ =============================================================== 5.2.2112.3 - Fixed: Gathering of Approval-History, Sync-History, ApprovedItems, and Settings.txt for Win2000 - Added: Collection of urllog.dat 5.2.2112.2 - Updated: Iexpress launch command changed: "cmd /D /K MPSRpt.cmd" - Updated: Progress.txt file to include stdout, and error information as well as %Date% %Time% - Updated: IISDump logfile location: "%MPSReports%\IISDump" - Renamed: AU version 4 "Windows Update.log" as "Windows_Update_v4.log" - Renamed: "SC_Output.txt" to "SC_Services_Output.txt" to reflect data collected - Added: Ability to specify a target drive using the "/d" switch - Added: collection of PingSUSServer.txt - Added: collection of WindowsUpdate_v5.log - Added: collection of FileList_SoftwareDistribution.txt - Added: collection of FileList_SUS_Directory.txt - Added: collection of FileList_WindowsUpdate.txt - Added: collection of SvcRegistration.txt - Added: collection of WUS Tracelog enable log files: Trace_Agent.log Trace_AU.log Trace_AUclient.log Trace_CDM.log Trace_COMAPI.log Trace_DataStore.log Trace_DownloadManager.log Trace_Driver.log Trace_EEHandler.log Trace_Handler.log Trace_Misc.log Trace_Parser.log Trace_PT.log Trace_Reporter.log Trace_Setup.log Trace_SvcShared.log Trace_WuWeb.log 5.2.2112.0 - Changed: output cab file name: from MSUSreports.cab to MPSRPT_SUS.cab - Renamed: NET.cmd to 2003.cmd to maintain naming consistency with Windows 2003 - Removed: Makecab as it could not compress folders\subfolders\files in thier original folder structure - Added: Choice.exe to include functionality to bypass MSInfo32 report - Added: IISDump.exe to gather IIS Metabase.xml, mbschema.xml, and sysinfo_nnn-nnn.xml - Added: ISAINFO.VBS to gather ISAINFO.txt - Added: SC.exe to gather SC_Output.txt - Added: Proxycfg.exe to gather ProxyCFG_WinHTTP.txt - Added: collection of approveschema.xml - Added: collection of URLsan.ini.txt - Added: collection of all URLscan logs - Added: collection of SessionManager_Key.txt - Added: collection of ActiveSetupInstalledComponents.txt - Added: collection of Bits_wuaudnld_files - Added: collection of IISLockdown_Oblt-log.log - Added: collection of ProxyCFG_WinHTTP.txt - Added: collection of ActiveSetupInstalledComponents.txt - Added: collection of Services_Key.hiv - Added: collection of Services_Key.txt - Added: collection of Uninstall_KEY.txt - Added: collection of STARTUP.txt - Added: collection of Setup_key.txt - Added: collection of Updates_Key.txt - Added: collection of vminst.log - Added: Cabarc (in place of Makecab) to enable the compression of folders\subfolders\files. Cabarc used to compress the following folders: HotfixInstaller-Logs - Folder containing all hotfix installation log files W3SVC-IISLogs - Folder containing all W3SVC IIS logs 5.2.2003.0 - Integrated tool for Windows Server 2003, Windows XP, Windows 2000 - Added: Bitsadmin.exe utility to capture any download jobs currently queued by BITS - Added: Collection of ApprovedItems.txt from the SUS server - Removed: Collection of Security Event Log 2.0 - Added: capture of History-sync.xml, history-approve.xml, and settings.txt from SUS server - Added: capture of wusetup.log from systems running the Automatic Updates v 2.2 client 1.0 - Initial version