Stability Audit - Windows
| 0 Votes |
Versioning - This is the latest version.
| 1 | Stability Audit - Windows | 1/9/2014 2:17:52 PM |
| 2 | Stability Audit - Windows | 5/6/2015 7:38:01 AM |
Description
This is an attempt to detect events and other items that might be related to system problems.
Latest version found here: http://bigfix.me/analysis/details/2994619
Related:
http://bigfix.me/relevance/details/2157
Found the Windows Error Reporting locations here: http://www.sevenforums.com/tutorials/4567-problem-reports-solutions-clear-history.html
C:\Users\Default\AppData\Local\Microsoft\Windows\WER\ReportQueue
C:\Users\<username>\AppData\Local\Microsoft\Windows\WER\ReportQueue
C:\ProgramData\Microsoft\Windows\WER\ReportQueue
Property Details
Properties
# hard reboots
Period
1 day
| * Results in a true/false |
if (52000 < record count of system event log) then ERROR "too many log records" else ( number of (records whose (event id of it = 41) of system event log) /* http://support.microsoft.com/kb/2028504 */ )
WER - Type,Count
Period
1 day
| * Results in a true/false |
if (version of operating system > "6.0") then ((it, multiplicity of it) of unique values of preceding texts of firsts "_" of names of folders of folders whose(name of it = "ReportArchive" OR name of it = "ReportQueue") of ((folders "AppData\Local\Microsoft\Windows\WER" of folders whose(exists folder "AppData\Local\Microsoft\Windows\WER" of it) of folder "C:\Users");(folder "C:\ProgramData\Microsoft\Windows\WER"))) else ERROR "NotApplicable"
WER - Kernel+Critical
Period
1 day
| * Results in a true/false |
if (version of operating system > "6.0") then (sum of (multiplicity of it) of unique values whose(it = "Critical" OR it = "Kernel") of preceding texts of firsts "_" of names of folders of folders whose(name of it = "ReportArchive" OR name of it = "ReportQueue") of ((folders "AppData\Local\Microsoft\Windows\WER" of folders whose(exists folder "AppData\Local\Microsoft\Windows\WER" of it) of folder "C:\Users");(folder "C:\ProgramData\Microsoft\Windows\WER"))) else ERROR "NotApplicable"
# of BSOD
Period
1 day
| * Results in a true/false |
if (52000 < record count of system event log) then ERROR "too many log records" else ( number of records whose (source of it as lowercase ="bugcheck") of system event log )
Average Reliability Score
Period
12 hours
| * Results in a true/false |
(it / number of string values of selects "SystemStabilityIndex FROM Win32_ReliabilityStabilityMetrics" of wmis) of sum of (it as floating point) of string values of selects "SystemStabilityIndex FROM Win32_ReliabilityStabilityMetrics" of wmis
Average of last 10 Reliability Scores
Period
12 hours
| * Results in a true/false |
(it / 10) of sums of (it as floating point) of (tuple string items (0;1;2;3;4;5;6;7;8;9) of it) of concatenations ", " of string values of selects "SystemStabilityIndex FROM Win32_ReliabilityStabilityMetrics" of wmis
Relevance
Sharing
| Social Media: |
Comments
 |
|
| Related: https://smhelp.uservoice.com/forums/234177-help-topics/suggestions/10565637-m-agent-service-v1-0-93-crashes-on-windows-10 | |
|
|
| You are very welcome. Let me know if you come up with any other related properties to check, or wish others were added. ChkDsk's and HD SMART data come to mind. | |
 |
|
| Thanks for posting this James, this is very helpful for our desktop techs in troubleshooting and identifying larger issues. | |
