Friday, August 24, 2012

Windows 7/2008r2 Group Policy diagnostic event log

 

Windows 7 / 2008R2 Group Policies are located in the Event Viewer. Under
\Applications and Services Logs\Microsoft\Windows\Group Policy\Operational.

While Windows 7 logs many events to event log you sometimes need the operational additional information.

GPO is processed by the Windows  service called "Group Policy Client". You can enable a detailed diagnostic report for this services via the reg key:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics]
"GPSvcDebugLevel"=dword:00030002

The log files are: %WINDIR%\debug\usermode\gpsvc.log

(need to reboot or restart the service).

Post a Comment

Blog Archive