JSI Tip 2429. How can enable Kerberos event logging?

To troubleshoot Kerberos, enable Kerberos event logging by using Regedt32 to navigate to:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters

On the Edit menu, Add Value name LogLevel, using data type REG_DWORD, and set the data value to 1. Kerberos events will be recorded in the System event log.

Shutdown and restart your computer.

NOTE: You may have to add the Parameters key.

NOTE: Delete the LogLevel value name when you are finished troubleshooting, as the logging causes a performance hit.