NT Gatekeeper--Learning about NT 4.0 Remote Access Client-Side Logging Options

I regularly troubleshoot Windows NT 4.0 remote access problems. I'm familiar with the NT 4.0 RAS logging options on the server side. However, I'd like to have a set of RAS-related log files on the client side. Which NT RAS client-side logging options are available?

Microsoft provides two RAS-specific logging options for NT 4.0 clients: the Point-to-Point Protocol (PPP) log and the device log. Both options are disabled by default, but you can use a registry hack to enable them. Both options log events to a text file, independently of the standard NT 4.0 auditing system (i.e., you can't use NT Event Viewer to view their output).

The PPP log records all PPP-related events to the ppp.log file, which resides in %systemroot%system32ras. To enable PPP logging, set the Logging REG_DWORD registry value to 1. You can find this value in the HKEY_ LOCAL_MACHINESYSTEMCurrentControlSetServicesRasManPPP registry subkey.

The device log records all communication between serial ports and the devices connected to them in command mode. Like ppp.log, device.log resides in %systemroot%system32 ras. To enable device logging, set the Logging REG_DWORD registry value to 1. You can find this value in the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesRasMan Parameters registry subkey.