WER Settings

Windows Error Reporting (WER) provides many settings to customize the problem reporting experience. All of these settings can be set using Group Policy. Some can also be changed in Action Center for Windows 7 and Windows 8. For Windows 10, use the search function in Settings to locate View advanced system settings. WER settings are located in one of the following registry subkeys:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting

Windows Error Reporting subkey

BypassDataThrottling

REG_DWORD

Possible values:

0 - Disable data bypass throttling. If the bypass is disabled or not configured as a policy setting, WER throttles data by default. WER does not upload more than one CAB file for a report that contains data about the same event types.

1 - Enable data bypass throttling. WER does not throttle data. WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report.

Whether to enable the bypass of WER client data throttling

ConfigureArchive

REG_DWORD

Possible values:

1 - Parameters only (default on Windows 7)
2 - All data (default on Windows Vista)

Whether to archive parameters only or all data

Consent\DefaultConsent

REG_DWORD

Possible values:

1 - Always ask (default)
2 - Parameters only
3 - Parameters and safe data
4 - All data

Default consent choice

Consent\DefaultOverrideBehavior

REG_DWORD

Possible values:

0 - Vertical consent will override the default consent (default)
1 - Default consent will override the application-specific consent

Whether default consent overrides vertical consent

Consent\[VerticalName]

REG_DWORD

Possible values:

1 - Always ask (default)
2 - Parameters only
3 - Parameters and safe data
4 - All data

Consent choice for the WER plug-in

CorporateWERDirectory

REG_SZ

The directory path

Target directory on the server

CorporateWERPortNumber

REG_DWORD

The port number

Port number to be used with the corporate server

CorporateWERServer

REG_SZ

The name of the server

Corporate server name

CorporateWERUseAuthentication

REG_DWORD

Possible values:

0 - No (default)
1 - Yes

Whether to use Windows Integrated Authentication

CorporateWERUseSSL

REG_DWORD

Possible values:

0 - No (default)
1 - Yes

Whether to use SSL

DebugApplications\[ExeName] (replace "[ExeName]" with an actual name of an .exe file, for example, "notepad.exe")

REG_DWORD

Possible values:

0 - Processes with an executable image name of **\[ExeName\]** do not require the user to choose **Debug** or **Continue** (default)
1 - Processes with an executable image name of **\[ExeName\]** require the user to choose **Debug** or **Continue**

DebugApplications\* ("*" is the literal value name)

REG_DWORD

Possible values:

0 - All processes except ones specified explicitly in the setting **DebugApplications\\\[ExeName\]** do not require the user to choose **Debug** or **Continue** (default)
1 - All processes except ones specified explicitly in the setting **DebugApplications\\\[ExeName\]** require the user to choose **Debug** or **Continue**

DisableArchive

REG_DWORD

Possible values:

0 - Enabled
1 - Disabled

Enable or disable the archive

Disabled

REG_DWORD

Possible values:

0 - Enabled (default)
1 - Disabled

Enable or disable WER

DisableQueue

REG_DWORD

Possible values:

0 - Enabled
1 - Disabled

Enable or disable report queuing

DontShowUI

REG_DWORD

Possible values:

0 - UI (default)
1 - No UI

Enable or disable the WER UI

DontSendAdditionalData

REG_DWORD

Possible values:

0 - Send (default)
1 - Do not send

Whether to prevent sending second-level data

ExcludedApplications\[Application Name]

REG_SZ

Use WerAddExcludedApplication

List of excluded applications

ForceQueue

REG_DWORD

Possible values:

0 - No (default)
1 - Yes

Whether to send all reports to the user's queue

LocalDumps\DumpFolder or LocalDumps\[Application Name]\DumpFolder

REG_EXPAND_SZ

The directory path. The default value is %LOCALAPPDATA%\CrashDumps. If the default is not used, the application must ensure that the folder has a sufficient ACL.

Windows Vista: The registry values under the LocalDumps key are not supported. Note that this behavior changed with Windows Server 2008 and Windows Vista with Service Pack 1 (SP1).

The path where the dump files are to be stored.

Note that per-process settings will override any global settings that exist For more information, see Collecting User-Mode Dumps.

This setting is not supported in the HKEY_CURRENT_USER registry hive.

LocalDumps\DumpCount or LocalDumps\[Application Name]\DumpCount

REG_DWORD

The maximum number. The default is 10. When the maximum value is exceeded, the oldest dump file in the folder will be replaced with the new dump file.

Windows Vista: The registry values under the LocalDumps key are not supported. Note that this behavior changed with Windows Server 2008 and Windows Vista with SP1.

The maximum number of dump files in the folder.

This setting is not supported in the HKEY_CURRENT_USER registry hive.

LocalDumps\DumpType or LocalDumps\[Application Name]\DumpType

REG_DWORD

Possible values:

0 - Custom dump
1 - Minidump (default)
2 - Full dump

Windows Vista: The registry values under the LocalDumps key are not supported. Note that this behavior changed with Windows Server 2008 and Windows Vista with SP1.

The dump type.

This setting is not supported in the HKEY_CURRENT_USER registry hive.

LocalDumps\CustomDumpFlags or LocalDumps\[Application Name]\CustomDumpFlags

REG_DWORD

One or more values from the MINIDUMP_TYPE enumeration. The default is {MiniDumpWithDataSegs|MiniDumpWithUnloadedModules|MiniDumpWithProcessThreadData}.

Windows Vista: The registry values under the LocalDumps key are not supported. Note that this behavior changed with Windows Server 2008 and Windows Vista with SP1.

The custom dump options to be used. This value is used only when DumpType is set to 0.

This setting is not supported in the HKEY_CURRENT_USER registry hive.

LoggingDisabled

REG_DWORD

Possible values:

0–Enabled (default)
1–Disabled

Enable or disable logging

MaxArchiveCount

REG_DWORD

Range of possible values: 1–5000. The default is 1000.

Maximum size of the archive, in files

MaxQueueCount

REG_DWORD

Range of possible values: 1–500. The default is 50.

Maximum size of the queue

QueuePesterInterval

REG_DWORD

Number of days

Interval between reminders to the user to check for solutions, in days

RuntimeExceptionHelperModules![ pwszOutOfProcessCallbackDll name including path]

REG_DWORD

The contents of the value are ignored.

The name of the value is used to fetch the pwszOutOfProcessCallbackDll value.

Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP: This registry value is not supported.

WER Live Kernel Reports Settings

WER's Live Kernel Reports settings, which are described next, are both located under the following registry subkey:

For Windows 10 1703, Windows Server 2019, and later:

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl

For Windows 10 builds 1607 and older, Windows 8.1, Windows Server 2016, and Windows Server 2012 R2:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting

FullLiveKernelReports subkey

ComponentThrottleThreshold

REG_DWORD

The threshold (in hours) of how often any single component can create a full live dump. This value must be greater than or equal to SystemThrottleThreshold. Setting both to zero (0) will disable all time-based throttling. The default is 168 (7 days).

FullLiveReportsMax

REG_DWORD

The maximum number of full live dumps that may be on disk at any given time. The default is 1. On Windows 10 1803, Windows Server 2019, and later, setting this value to zero (0) will disable the live dump feature.

LastFullLiveReport

REG_QWORD

A SystemTime indicating the last full live report time, for the system or a specific ReportType. This is used to calculate whether a policy threshold has been satisfied.

SystemThrottleThreshold

REG_DWORD

The threshold (in hours) of how often any component on the system can create a full live dump. The default is 120 (5 days).

LiveKernelReports subkey

LiveKernelReportsPath

REG_SZ

The redirected storage location of live kernel reports. The default location is %systemroot%\LiveKernelReports. This value must be a valid path. The path must be in NT path format. For example, ??\C:\LiveDumpsFolder. For more information on path formats, see File path formats on Windows systems.

WER Reference