Settings for Active Directory Event Logging
  
PSS ID Number: Q187671
Article last modified on 06-12-1998
 
WINNT:5.0
 
winnt
 

======================================================================
********************************************************************
     BETA INFORMATION  BETA INFORMATION  BETA INFORMATION  BETA
 
     This article discusses a Beta release of a Microsoft
     product. The information in this article is provided as-is
     and is subject to change without notice.
 
     No formal product support is available from Microsoft for
     this Beta product. For information about obtaining support
     for a Beta release, please see the documentation included
     with the Beta product files, or check the Web location
     from which you downloaded the release.
 
     BETA INFORMATION  BETA INFORMATION  BETA INFORMATION  BETA
********************************************************************
 
---------------------------------------------------------------------
The information in this article applies to:
 
 - Microsoft Windows NT Server version 5.0
---------------------------------------------------------------------
 
IMPORTANT: This article contains information about editing the registry.
 Before you edit the registry, make sure you understand how to restore it
if a problem occurs. For information about how to do this, view the
"Restoring the Registry" Help topic in Regedit.exe or the "Restoring a
Registry Key" Help topic in Regedt32.exe.
 
SUMMARY
=======
 
This article describes how to change the level of detail logged for the
Active Directory service on a Windows NT 5.0 domain controller.
 
MORE INFORMATION
================
 
WARNING: Using Registry Editor incorrectly can cause serious problems that
may require you to reinstall your operating system. Microsoft cannot
guarantee that problems resulting from the incorrect use of Registry
Editor can be solved. Use Registry Editor at your own risk.
 
For information about how to edit the registry, view the "Changing Keys
And Values" Help topic in Registry Editor (Regedit.exe) or the "Add and
Delete Information in the Registry" and "Edit Registry Data" Help topics
in Regedt32.exe. Note that you should back up the registry before you edit
it. If you are running Windows NT, you should also update your Emergency
Repair Disk (ERD).
 
Events for the services listed below can be logged with varying levels of
detail. To change the level of detail, modify the appropriate registry
value using Registry Editor. The data values for these REG_DWORD values
have a valid range of 0-5, with zero providing minimal logging and five
providing maximum detail. The registry values listed below are contained
in the following registry key:
 
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Diagnostics
 
NOTE: This registry key is present only on domain controllers.
 
Knowledge Consistency Checker Service
-------------------------------------
 
The Knowledge Consistency Checker service maintains intra-site and inter-
site replication topology. This topology defines which domain controllers
communicate with each other to ensure that data is replicated throughout
the domain (and for some naming contexts, throughout the enterprise). This
service runs on each domain controller and logs events when the procedure
for checking the topology is started, stopped, or modified.
 
   Registry value name:  Knowledge Consistency Checker
 
Directory Service Replication Service
-------------------------------------
 
The Directory Service Replication service replicates files and folders
across domain controllers running the Active Directory service throughout
a domain. This service logs events that occur when replication requests
are processed. This can include replication requests from other computers,
as well as replication requests originating from the local computer. The
event detail for some of these events records information about the
transaction, including how many objects were replicated and the domain
controller from which the changes were replicated.
 
   Registry value name:  Replication Events
 
Additional query words: 5.00 ad ds directory service gc
======================================================================
Keywords          : kbenv ntdomain
Version           : WINNT:5.0
Platform          : winnt
Issue type        : kbinfo
=============================================================================
Copyright Microsoft Corporation 1998.