Active Directory Logs I’ve Learned to Love Part 7 of 7: GPO Client logging
Our last Active Directory log to love is involved with the processing of Group Policy Objects on the client. In addition to looking at the USERENV debug logging for problems with Group Policy application, the client also has a log capability which can fill out the whole picture. Here, logging can provide more information on client GPO processing, enumeration of applied GPO’s, and errors encountered during that processing.
To enable GPO client logging…
…navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Diagnostics and set the DWORD value for RunDiagnosticLoggingGroupPolicy to 1 and then reboot the system.
Once done, you will begin seeing event information regarding every step in the GPO processing cycle in the Application event log. Watch carefully, and like all the logs in this series keep an eye on the time stamps to see where any delays may be occurring. Also, make sure not to enable too many debug logs all at once, unless you’d like a pro-log-lific server that doesn’t perform all that well.
Click here to read all posts in this seven part series!
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine