Friday, August 17, 2018

Where are my crash dumps?
Windows 10 puts crash dumps in different locations as compared to Windows XP

Kernel Dumps are here:
%SystemRoot%\LiveKernelReports

Userland Dumps are here:
%ProgramData%\Microsoft\Windows\WER\ReportArchive

One directory up in WER you will see:
Report Archive
Report Queue
Temp

One could assume that Windows Error Reporting (WER) will put initial dump files and other telemetry in the Queue and once they are transmitted to the Microsoft team moved to Archive.  Perhaps you don't want your crashes reported.  How does one turn off WER but still maintain the ability to see what has crashed?