GPO Diagnostic logging in Application Log

[Kevin Coleclough]

A couple of weeks ago, after searching websites and user
groups, I came across 2 Registry settings for logging the
implementation of GPOs on my network. At the time I
applied both these settings to a test Citrix server, and
lo and behold, after a reboot, entries appeared in the
Application log describing what was happening (in terms of
GPOs) during a user logon. The second setting gave me a
very detailed usrenv.log file.

Now here's the problem: I cannot remember the change I
made to enable logging to the Application log. The other
change was to add UsrenvDebugLevel key to:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon

I'm sure that the second key I added included the
word 'Diagnostic', but for the life of me I cannot find
any reference on my test server!

Does anyone have any idea what it might be?

 

[Kevin Coleclough]

Well, I found it myself. For anyone interested, if you
create a new key Diagnostics to

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion

then a DWORD RunDiagnosticLoggingGroupPolicy with the
value 1

all GPO process will then be logged in the Application log
on that server, making troubleshooting soooo much easier.

Kevin