How to Enable User Environment Event Logging in Windows 2000

ID: Q186454

The information in this article applies to:

Microsoft Windows 2000 Server
Microsoft Windows 2000 Professional

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SUMMARY

This article describes how to enable the user environment event logging features available in Windows 2000.

MORE INFORMATION

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys And Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

You can log environment events using either Normal or Verbose mode. Information from either of these modes is stored in the Windows NT event log so that an administrator can view events either locally or remotely using Event Viewer.

To enable all forms of user environment event logging using Verbose mode without having to add a registry value for each component individually, add the following value to the registry:


   Registry Path: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT
                  \CurrentVersion\Diagnostics

   Value Name   : RunDiagnosticLoggingGlobal
   Value Type   : REG_DWORD
   Value Data   : 1

NOTE: The Diagnostics key is not present by default. You need to add it and leave the Class key empty.

To enable verbose event logging for group policies only, add the following value to the Registry:


   Registry Path: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\ 
                  CurrentVersion\Diagnostics

   Value Name   : RunDiagnosticLoggingGroupPolicy
   Value Type   : REG_DWORD
   Value Data   : 1

To enable verbose event logging for remote boot only, add the following value to the Registry:


   Registry Path: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\ 
                  CurrentVersion\Diagnostics

   Value Name   : RunDiagnosticLoggingIntelliMirror
   Value Type   : REG_DWORD
   Value Data   : 1

To enable verbose event logging for application deployment only, add the following value to the Registry:


   Registry Path: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\ 
                  CurrentVersion\Diagnostics

   Value Name   : RunDiagnosticLoggingAppDeploy
   Value Type   : REG_DWORD
   Value Data   : 1

Additional query words: 5.00 system policy profile domain logs logged

Keywords : kbenv
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbhowto