Set Logging via Local Registry
The local registry values that affect Group Policy and software installation logging are:
GPO Logging to the Event Log
The following registry setting enables verbose logging of GPO processing to the computer's Application Event Log. Note that in Win2K these events show up as Informational events, while in XP, they appear as Error events.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
RunDiagnosticLoggingGroupPolicy REG_DWORD 1
GPO Logging to userenv.log
The following registry settings log GPO processing to the file C:\Windows\Debug\UserMode\userenv.log. Note that the modes of logging presented here are just a few of the options. For more information, see http://support.microsoft.com/kb/221833.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
No Logging: UserEnvDebugLevel REG_DWORD 0
Normal Logging: UserEnvDebugLevel REG_DWORD 0x10001
Verbose Logging: UserEnvDebugLevel REG_DWORD 0x10002
Software Installation Logging
The following registry setting logs all activity related to software installation to the file C:\Windows\Debug\UserMode\appmgmt.log.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
AppmgmtDebugLevel REG_DWORD 0x9B