Active Directory Cookbook for windows server 2003- P47:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | Recipe Enabling GPO Client Logging Problem You want to troubleshoot GPO processing issues on a client or server by enabling additional logging in the Application event log. Solution Using a graphical user interface 1. Run from the command line or Start. Run. 2. In the left pane expand HKEY_LOCAL_MACHINE Software Microsoft - Windows NT . CurrentVersion. 3. If the Diagnostics key doesn t exist right-click on CurrentVersion and select New. Key. Enter Diagnostics for the name and hit enter. 4. Right-click on Diagnostics and select New. DWORD value. Enter RunDiagnosticLoggingGroupPolicy for the value name. 5. In the right pane double-click on RunDiagnosticLoggingGroupPolicy and enter 1. 6. Click OK. Using a command-line interface reg add HKLM SOFTWARE Microsoft Windows NT CurrentVersion Diagnostics v RETURN RunDiagnosticLoggingGroupPolicy t REG DWORD d 1 Using VBScript This code enables GPO logging on a target computer ----- SCRIPT CONFIGURATION ------- strComputer ComputerName . rallen-w2k3 ----- END CONFIGURATION ---------- const HKLM H80000002 strRegKey SOFTWARE Microsoft Windows NT CurrentVersion Diagnostics set objReg GetObject winmgmts strComputer root default StdRegProv HKLM strRegKey RunDiagnosticLoggingGroupPolicy 1 Enabled GPO logging for strComputer Discussion If you experience problems with client GPO processing such as a GPO not getting applied even though you think it should there aren t many tools that can help you troubleshoot the problem. One way to get detailed information about what GPOs are applied on a client is by enabling additional GPO event logging. If you set the RunDiagnosticLoggingGroupPolicy Registry value to 1 extensive logging will be done in the Application event log. Events detailing the beginning of the GPO processing cycle what GPOs are applied and any errors encountered will all be logged. Here is an example of a log message that .
