JSI Tip 2886. How can I enable diagnostic event logging for Active Directory services?

Diagnostic logging of Active Directory services is available, but turned off by default, as it could quickly fill your event log.

If you are having problems related to any of the following services, you can configure larger event logs, by selecting the event log and right-clicking Properties:

1 Knowledge Consistency Checker (KCC)2 Security Events3 ExDS Interface Events4 MAPI Interface Events5 Replication Events6 Garbage Collection7 Internal Configuration8 Directory Access9 Internal Processing10 Performance Counters11 Initialization/Termination12 Service Control13 Name Resolution14 Backup15 Field Engineering16 LDAP Interface Events17 Setup18 Global Catalog19 Inter-site Messaging

To enable the diagnostic logging, use Regedt32 to navigate to:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSDiagnostics

Double-click the Value Name that corresponds to the service you wish to log. In the Dword Editor, change the data value. The valid data values are:

0 (None): This default setting only logs critical events and error events.1 (Minimum): One message per major task.2 (Basic)3 (Extensive): Log the steps to complete a task.4 (Verbose)5 (Internal:): Log everything.

NOTE: See tip 2519.

NOTE: See What Active Directory diagnostic event logging categories have been added in Windows Server 2003?