Active Directory Logs I’ve Learned to Love Part 1 of 7: An Introduction
Active Directory in Server 2003 has a lot of functionality, and with that a lot of eventing information you can use to look for problems when issues occur. In this seven part series on some of the most useful logs for Active Directory we’re going to take a look at the ones you’ll want to watch for in your network.
We’ll start tomorrow with the NTDS Diagnostics log where twenty-four separate options can be dialed up to overwhelm you with debugging data. Then, we’ll move into DCPROMO and NETLOGON logging for identifying what’s going wrong with a domain controller as its being built and after its begun servicing logons. Then, we move into Kerberos logging which will help you understand authentications and authentication traffic as it passes through your network.
We’ll finish with a look at the logon process with the USERENV debug logs and GPO application on the client side with GPO client logging. By the end of this series, you’ll have everything you need (at least until Server 2008 arrives) to help you find and fix problems with your Active Directory.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine