Hi David,
What Operating Systems are you creating minidump tutorials for The behavior is different in Windows Vista than it is in older operating systems.
Let me address various ways to get minidumps on the local machines for 'sneaker-net' and then direct you to what we had envisioned.
Sneaker-net
If you map your files on winqual, we will put the server into collection mode for your file's crashes. This is interesting to you for the sneaker-net approach since minidumps are only stored locally in Windows Vista if the servers were collecting data at the time of the report. (...also, I believe the minidump will be available if the computer is offline)
Sneaker-net approach for older operating systems is easy... set up CER policies to report crash information to a local folder or shared folder, and have the 'Cabs' folder sent to you via whatever transport = sneaker-net
. You don't need to change your code, but you do need to be aware of expected client side behavior to be successful in the sneaker-net approach. For example, CER is not supported in Windows Vista. Instead, AEM is the method to use (the protocol is different). AEM requires Operations Manager 2007, so there is overhead for an IT shop if they are not already leveraging this technology whereas CER was overly simple. On Windows Vista, there is another solution (target's end-users) called Problem Reports and Solutions ...or wercon.exe. If the back-end services were collecting data for the crash, the same data is available through wercon.exe.
What Microsoft had envisioned
For Developers - We had envisioned developers and ISVs to use Winqual to access crash information by mapping their products/files. In this way, it did not matter where the report came from; Winqual would prioritize failures based on volume and growth of the reports over 90 days and enable developers and ISVs to create responses that would be displayed tot eh users if they encountered the crash again with information that could prevent the crash (update available, workaround, and so on). Error Reporting for Applications happens by default without any needed application code unless the application is handling their own exceptions (...and as Claus mentioned, I don't encourage anyone to implement their own exception handler
).
For IT-PROs - We had also envisioned the need for IT-Professionals (System/Network administrators of companies) to manage what should be allowed to leave the corporate wire in regards to error reporting. To achieve this management in the past, we offered Corporate Error Reporting. This was a set of client policies and a tool that redirected error reports from within the IT shop to a common location where the Admin could use the tool to configure common reporting behavior and broker the data to Microsoft for the types of data the Admin allowed. (See CER). This solution was not scalable for large IT-PRO shops as the tool used local memory to load the crash data in the common folder and apply the reporting rules. The larger the share size and # of unique reports the longer it would take to load and report. For Windows Vista, it was decided to change the reporting protocol to use http/https and interact with Operations Manager 2007 using AEM (Agentless Event Management).
For End Users - Finally, we had envisioned that it would be useful for an end-user top see (historically) what Error Reporting events happened on their computer. To enable this, we created wercon.exe. Through this tool, users can not only see what happened in the past, but they can check for solutions (responses) without having to wait for the crash to happen again. The tool does keep crash data around in a queue so to prevent unneeded utilization of disk space Microsoft decided to only store crash data (minidumps) for crashes that the Microsoft reporting servers were collecting for.
Did we screw it up I hope not. Let us know if we did so we work on fixing it.
.
Kind regards,
-Jason