# Windows Error Reporting (WER) keys ## Windows Error Reporting (WER) system key ``` HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting ``` Sub keys: Name | Description --- | --- Assert Filtering Policy | BrokerUp | Consent | Debug | Hangs | HeapControlledList | LocalDumps | RuntimeExceptionHelperModules | WMR | Values: Name | Data type | Description --- | --- | --- BypassDataThrottling | REG_DWORD | Bypass WER client data throttling ConfigureArchive | REG_DWORD | Archive only the parameters or all data EnableZip | REG_DWORD | ErrorPort | REG_SZ | MachineID | | MaxQueueSizePercentage | | PurgeThreshholdValueInKB | | ServiceTimeout | REG_DWORD | ### BypassDataThrottling value 0 - Disable data bypass throttling 1 - Enable data bypass throttling ### ConfigureArchive value 1 - Parameters only (default on Windows 7) 2 - All data (default on Windows Vista) ### Consent sub key Values: Name | Data type | Description --- | --- | --- DefaultConsent | REG_DWORD | The default consent choice DefaultOverrideBehavior | REG_DWORD | The default consent overrides the vertical consent NewUserDefaultConsent | REG_DWORD | #### DefaultConsent value 1 - Always ask (default) 2 - Parameters only 3 - Parameters and safe data 4 - All data #### DefaultOverrideBehavior value 0 - Vertical consent will override the default consent (default) 1 - Default consent will override the application-specific consent| ### Debug sub key Sub keys: Name | Description --- | --- UIHandles | Values: Name | Data type | Description --- | --- | --- StoreLocation | REG_SZ | Location of last report? #### UIHandles sub key Values: Name | Data type | Description --- | --- | --- CheckingForSolutionDialog | | CloseDialog | | FirstLevelConsentDialog | | RecoveryDialog | | RestartDialog | | ### Hangs sub key Values: Name | Data type | Description --- | --- | --- NHRTimes | | ### LocalDumps sub key Per-application setting can be define by an application-specific key under: ``` HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\LocalDumps ``` For example an application-key for MyApplication.exe ``` HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\LocalDumps\MyApplication.exe ``` Values: Name | Data type | Description --- | --- | --- DumpCount | REG_DWORD | The maximum number of dump files in the folder. Older dump files are overwritten if the maximum has been reached.
By default: 10 DumpFolder | REG_EXPAND_SZ | The path where the dump files are to be stored.
By default: %LOCALAPPDATA%\CrashDumps DumpType | REG_DWORD | The dump type
By default: 1 (Mini dump) CustomDumpFlags | REG_DWORD | Custom dump flag when dump type is 0 (Custom dump). #### DumpType value Value | Description --- | --- 0 | Custom dump 1 | Mini dump (default) 2 | Full dump #### CustomDumpFlags value The CustomDumpFlags value contains a bitwise combination of the MINIDUMP_TYPE enumeration values. ## Windows Error Reporting (WER) user key ``` HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting ``` Sub keys: Name | Description --- | --- Consent | Hangs | Values: Name | Data type | Description --- | --- | --- AutoApproveOSDumps | REG_DWORD | Disabled | REG_DWORD | DisableArchive | REG_DWORD | DisableQueue | REG_DWORD | DontSendAdditionalData | REG_DWORD | DontShowUI | REG_DWORD | ForceQueue | REG_DWORD | LastCrashSelfReportTime | | LastQueuePesterTime | REG_QWORD_LITTLE_ENDIAN | LastResponsePesterTime | | LoggingDisabled | REG_DWORD | MaxArchiveCount | REG_DWORD | MaxQueueCount | REG_DWORD | MaxQueueSize | REG_DWORD | ## Notes ### Kernel faults sub key Sub keys: Name | Description --- | --- Queue | #### Queue sub key Values: Name | Data type | Description --- | --- | --- %FILENAME% | | Creation time of the minidump?
Contains a FILETIME ``` C:\\Windows\\Minidump\\MMDDYY-#-01.dmp ``` ### Other C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\WER Sub directories: Name | Description --- | --- ERC | ReportArchive | ReportQueue | ## External Links * [Collecting User-Mode Dumps](https://learn.microsoft.com/en-us/windows/win32/wer/collecting-user-mode-dumps) * [MINIDUMP_TYPE enumeration](https://learn.microsoft.com/en-us/windows/win32/api/minidumpapiset/ne-minidumpapiset-minidump_type) * [WER Settings](https://learn.microsoft.com/en-us/windows/win32/wer/wer-settings)