Outlook - Monitor Addins and crashes

Outlook Desktop - Monitor Addins load times and crashes

Outlook can dynamically load addins when it starts or when a feature is being requested.

The addins can cause long startup times and cause Outlook to crash if they have errors.

Warning dialog users will see when Addin crashes

UXM Desktop agent can monitor the load times and applications crashes via the Application Event Log on each machine it's installed on.

Events to monitor

Log	Level	Source	Event ID	Example data
Application	Information	Outlook	45	Outlook loaded the following add-in(s): Name: Microsoft Exchange Add-in Description: Exchange support for Unified Messaging, e-mail permission rules, and calendar availability. ProgID: UmOutlookAddin.FormRegionAddin GUID: {F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3} Load Behavior: 3 HKLM: 1 Location: C:\Program Files\Microsoft Office\Root\Office16\ADDINS\UmOutlookAddin.dll Boot Time (Milliseconds): 15 ...
Application	Warning	Outlook	59	ProgID: OutlookAddin.Connect.1 GUID: {399DD5A6-7262-4D34-9342-1F601E6B4EF2} Name: 3Kontakt Outlook Addin Description: 3Kontakt Outlook Addin Load Behavior: 2 HKLM: 0 Location: c:\program files (x86)\3kontakt\3kontakt\outlookaddin64\outlookaddin_x64.dll Threshold Time (Milliseconds): 0 Time Taken (Milliseconds): 0 Disable Reason: This add-in caused Outlook to crash. As a result, it was disabled. Policy Exception (Allow List): 0
Application	Error	Outlook	1000	Der opstod fejl under kørsel af tilføjelsesprogram. Outlook gik ned under 'SelectionChange' tilbagekald af brugergrænsefladen 'ExplorerEvents_10', mens tilføjelsesprogrammet '3Kontakt Outlook Addin' blev kaldt.
Application	Information	Windows Error Reporting	1001	Fault bucket 2142946106360456060, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: OUTLOOK.EXE P2: 16.0.11901.20218 ...
Application	Error	Application Error	1000	Faulting application name: OUTLOOK.EXE, version: 16.0.11901.20218, time stamp: 0x5d4b7cb4 Faulting module name: KERNELBASE.dll, version: 10.0.17134.885, time stamp: 0x3672f486 Exception code: 0xe06d7363 Fault offset: 0x000000000003a388 Faulting process id: 0x30e8 Faulting application start time: 0x01d55e39107c2291 Faulting application path: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll Report Id: 05adef14-7da5-4265-b45f-a91e4265e2c8 Faulting package full name: Faulting package-relative application ID:
Application	Information	Outlook	26	Connection to Microsoft Exchange has been lost. Outlook will restore the connection when possible.

Setup

1. Install/deploy UXM Desktop agent to machines running Outlook that needs to be monitored.
2. Setup Node group that defines which machines (nodes) that should receive the monitoring rules.
3. Add Event Log monitor
4. Wait 1 hour for agents to synchronize monitors, the Desktop agents will look back 30 days in time for old event and send them to UXM.
5. Review data in UXM - Outlook dashboard.