EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB46206: How to enable additional Kerberos Integrated Authentication logging on Windows machines?


Community Admin

• Strategy


How to enable additional Kerberos Integrated Authentication logging on Windows machines?

When troubleshooting Kerberos Integrated Authentication issues, it might be required to enable additional logging to identify the root cause. On Windows machines enable Kerberos Event logging for additional information logged into Windows Event Viewer > System log.
 
 
 
Follow the steps below to enable Kerberos Event Logging:
WARNING: Before following the steps below, ensure to backup the registry of the Windows machine.

  1. Start Registry Editor.
     
  2. Add the following registry value:

    Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters

    Registry Value: LogLevel
    Value Type: REG_DWORD
    Value Data: 0x1
     
    If the "Parameters" subkey does not exist, create it manually.
     
    Note: Remove this registry value when it is no longer needed so that performance is not degraded on the computer. Also, you can remove this registry value to disable Kerberos event logging on a specific computer.
     
     
  3. Quit Registry Editor. The setting will become effective immediately on Windows Server 2008, on Windows Vista, on Windows Server 2003, and on Windows XP. For Windows 2000, you must restart the computer.

For more information, refer to Micosoft KB article Q262177 (http://support.microsoft.com/kb/262177)
 
Kerberos Event logging can be accessed via the Windows Event Viewer System log:
 

ka04W000000OhMsQAK_0EM4400000029RB.png

 
 
Third Party Software Installation:
WARNING:
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability.
 
Registry Modification:
WARNING:
Modifying registry values incorrectly may cause serious, system-wide problems that may require the re-installation of Microsoft Windows. Any edit of the registry is done at the user's own risk. Since these are user-initiated changes, they are not covered by any Strategy warranty. If using Microsoft Windows, the user should backup the registry and/or update an Emergency Repair Disk (ERD) prior to alterations.


Comment

0 comments

Details

Knowledge Article

Published:

May 24, 2017

Last Updated:

May 24, 2017