| 
How To Gather Information for Effective Troubleshooting of Performance Issues
ID: Q175658
 
 | 
The information in this article applies to:
- 
Microsoft Windows NT Workstation versions  3.5, 3.51, 4.0
- 
Microsoft Windows NT Server versions  3.5, 3.51, 4.0
IMPORTANT: This article contains information about editing the registry. 
Before you edit the registry, make sure you understand how to restore it if
a problem occurs. For information about how to do this, view the "Restoring 
the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help 
topic in Regedt32.exe.
SUMMARY
This article explains how to gather information so that Microsoft Support
Professionals can troubleshoot performance problems on a computer running
Windows NT. Please read all steps as you will be asked to provide
information from several tools when contacting a support professional for assistance.
MORE INFORMATION
The basic tool used for troubleshooting performance issues is Performance
Monitor. Follow the steps below to prepare for collecting performance
information:
Prior to Creating a Performance Monitor Log
- Turn off screen savers permanently.
 
 - Click Start, point to Settings, click Control Panel, and then double-
      click Display.
 
 
- Click the Screen Saver tab, click None, and then click OK.
 
 
 
- Disable all non-essential services in the Services tool in Control
   Panel.
- For all possible disk issues, enable Diskperf.
 
 - Click Start, point to Programs, and then click MS-DOS Command Prompt.
 
 
- Type the following command to enable disk counters:
         
 
 diskperf -y
 
 NOTE: Do not use diskperf -YE unless instructed to do so.
 
 
 
- Document Lanman Server parameters.
 
 WARNING: Using Registry Editor incorrectly can cause serious problems that
may require you to reinstall your operating system. Microsoft cannot
guarantee that problems resulting from the incorrect use of Registry Editor
can be solved. Use Registry Editor at your own risk.
 
 For information about how to edit the registry, view the "Changing Keys and
Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete
Information in the Registry" and "Edit Registry Data" Help topics in
Regedt32.exe. Note that you should back up the registry before you edit it.
If you are running Windows NT, you should also update your Emergency
Repair Disk (ERD).
 - Run Registry Editor (Regedt32.exe).
 
 
- Go to the following keys in the registry:
         
 
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager
 \Memory Management
 
 
 
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer
 \Parameters
 
 NOTE: The above registry keys are one path; they have been wrapped
      or readability.
 
 
- Write down all values on the right-hand side that are not equal to
      zero.
         
 
 -or-
 
 On the Registry menu, click Save Subtree As and then change the file
      type to Text File and give the file a name.
 
 NOTE: Do not save the file as a *.REG file.
 
 
 
- If instructed to do so by the support professional, install the SNMP service and
   Network Monitor Agent and Tools. This procedure will require the Windows
   NT compact disc or an appropriate share path.
 
 To install on Windows NT 3.51
 
 - In the Main group, double-click Control Panel, and then double-click
      Network.
 
 
- Click Add Software, select SNMP, and then click OK.
 
 
- Repeat the previous step and select Network Monitor Agent and Tools.
      Click OK when prompted to restart the computer.
 
 
 To install on Windows NT 4.0
 
 - Click Start, point to Settings, click Control Panel, and then double-
      click Network.
 
 
- Click the Services tab.
 
 
- Click Add.
 
 
- From the list of Network Software, select SNMP and then click OK.
 
 
- Repeat the previous step and select Network Monitor Agent and Tools.
 
 
- Click No when prompted to restart the computer.
 
 
- If there are any service packs installed, reapply the service pack.
 
 
- Click OK when prompted to restart the computer.
   NOTE: These services install Network Interface, Network Segment, and
   TCP/IP counters in Performance Monitor.
 
 
 
Creating the Performance Monitor Log
Run Performance Monitor from the following location:
- Click Start, point to Program, and then click Administrative Tools.
For specific details on creating the Performance Monitor log, please see
the following article in the Microsoft Knowledge Base:Q150934 How to Create a Performance Monitor Log for NT Troubleshooting
In cases where the User Interface (UI) of the server in question is hanging
or not responding, run Performance Monitor from another computer running
Windows NT Server or Workstation.
The counters recommended in the article above will change depending on the
problem that you are troubleshooting. See the "Recommended Performance
Objects" section below or consult the Microsoft Support Engineer for
suggested objects to monitor.
Recommended Performance Objects
If you are troubleshooting a performance issue or an issue that looks like
a memory leak, the objects that Performance Monitor should log include, but
are not limited to, the following:
   Cache
   Logical Disk
   Memory
   Network Interface
   Network Segment
   Objects
   Paging File
   Physical Disks
   Process
   Processor
   Redirector
   Server
   Server Work Queues
   System
   Thread 
In addition, the smaller the update interval, the larger the log file, so
check to make certain there is sufficient disk space available on the
computer running Performance Monitor.
Allow Performance Monitor to run a minimum of three days unless you have
been instructed otherwise.
Do not log off of the computer where you are running Performance Monitor as
this will close out Performance Monitor. Minimize Performance Monitor if
preferred and if needed lock the screen on this computer.
After Creating the Performance Monitor Log
- Create a Windows NT Diagnostics Report.
 
 - Click Start, point to Programs, click Administrative Tools, and then
      double-click Windows NT Diagnostics.
 
 
- On the File menu, click Save Report.
 
 
- Click All Tab in the Scope Set, click Complete in the Detail
      Level, click File for Destination, and then click OK.
 
 
 
- Save the System and Application Event Logs.
 
 - Click Start, point to Programs, click Administrative Tools, and then
      double-click Event Viewer.
 
 
- On the Log menu, click System. If System is already selected, click
      Save As. Save the file as System.evt.
 
 
- On the Log menu, click Application.
 
 
- On the Log menu, click Save As. Save the file as Application.evt.
 
 
 
- Zip the following files into one file using a compression tool.
 
 - Registry file or the written information in a text file.
 
 
- Performance Monitor log (the .log file, not the *.pml file).
 
 
- Windows NT diagnostics report.
 
 
- Event logs: System.evt and Application.evt.
 
 
 
Contact the Microsoft Support Professional working with you for additional information
on sending the zipped file to the engineer.
Additional query words: 
performance tuning memory leak utilization Perfmon setup 
Keywords          : kbtool nthowto NTSrvWkst ntutil 
Version           : WinNT:3.5,3.51,4.0
Platform          : winnt 
Issue type        : kbhowto 
Last Reviewed: July 2, 1999