JSI Tip 3824. How do I get Windows 2000 to log SceCli activity during Group Policy processing?

The Windows 2000 Security Configuration Client (SceCli) configures group membership, user rights, and security policy, like password policy and account restrictions, that have been set using Group policy.

To cause SceCli to log to %SystemRoot%SecurityLogsWinlogon.log:

1. Use Regedt32 to navigate to

   HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonGPExtension\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}

2. On the Edit menu, Add Value name ExtensionDebugLevel, a REG_DWORD data type, and set the data value to 2.

3. In the Start / Run box, type secedit /refreshpolicy machine_policy /enforce