I've got a customer with intermittent System hangs. The System in case is a Windows Terminal Server 2008R2 SP1. Sometimes one session in the Server will freeze. Everyone else can work as usual, but this one user can't log in again, the session can not be closed even a Server shutdown will not work.
I obtained Memory.dmp files using the ctrl+scroll lock method but of course These just tell me "the user manually initiated this Crash dump".
So how would I continue to debug? Is there a way to get the most actives processes from the dump or anything else which might be useful? I tried DebugDiag 2.0 but it crashes on the dump, so it is of no help to me :(