2010-09-08 01:55:03 UTC
The crux of finding drivers using PTE entries, excessively or otherwise, is
setting the reg value HKLM\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management - TrackPtes=1, rebooting and then monitoring driver
with live kernel debugging, or in a crash dump.
Unfortunately this doesn't work on XP. You get the message
"Unable to get System PTE individual lock consumer information"
There are various support group entries dating back a few years saying that
this is due to some symbols missing from the public PDB's. Testing shows that
this doesn't work.
Any suggestions or work-around would be greatly appreciated.