| Author | Messages | |
gturner
Posts:26
 | | 05/27/2009 1:20 PM |
| as subject looking to enable the 'userenvdebuglevel' of a windows server 2008 domain controller.
there seem to be different ways in which this now done in windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier versions
is this now valid on windows server 2008, as it seems we now need to look at operational logs etc .
| | | |
| Darren
Posts:103
| | 05/27/2009 3:24 PM |
| Graham-
The GP operational log officially taken over for userenv.log in Vista and
2008. There is still a log that provides the same ugly detail as userenv,
now called gpsvc.log. You might also google gplogview, which provides a
command-line/text-based view of the GP Operational Log. But to enable
gpsvc.log if you really like that trace log look and feel:
Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value Name: GPSvcDebugLevel
Value Type: REG_DWORD
Value Data: 30002 (hex)
It will log to the same place as userenv, but will be called gpsvc.log.
Darren
Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out
www.gpoguy.com-- the best source for GPO FAQs, video training, tools and
whitepapers. Also check out the Windows Group Policy Guide, the
definitive resource for Group Policy information.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 5:20 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] windows2008 userenvdebug
as subject looking to enable the 'userenvdebuglevel' of a windows server
2008 domain controller.
there seem to be different ways in which this now done in
windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier
versions
is this now valid on windows server 2008, as it seems we now need to look at
operational logs etc .
| | | |
| gturner
Posts:26
| | 05/27/2009 3:41 PM |
| darren, thanks for note back will give that a look
btw - not related but related !
how do i get to change the registry on w2k8 !
i changed the local policy butto no avail
________________________________
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 15:23
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Graham-
The GP operational log officially taken over for userenv.log in Vista and
2008. There is still a log that provides the same ugly detail as userenv,
now called gpsvc.log. You might also google gplogview, which provides a
command-line/text-based view of the GP Operational Log. But to enable
gpsvc.log if you really like that trace log look and feel:
Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value Name: GPSvcDebugLevel
Value Type: REG_DWORD
Value Data: 30002 (hex)
It will log to the same place as userenv, but will be called gpsvc.log.
Darren
Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out
www.gpoguy.com-- the best source for GPO FAQs, video training, tools and
whitepapers. Also check out the Windows Group Policy Guide, the
definitive resource for Group Policy information.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 5:20 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] windows2008 userenvdebug
as subject looking to enable the 'userenvdebuglevel' of a windows server
2008 domain controller.
there seem to be different ways in which this now done in
windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier
versions
is this now valid on windows server 2008, as it seems we now need to look at
operational logs etc .
| | | |
| Darren
Posts:103
| | 05/27/2009 4:17 PM |
| Not sure I follow? Do you mean you can't run regedit.exe?
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 7:37 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
darren, thanks for note back will give that a look
btw - not related but related !
how do i get to change the registry on w2k8 !
i changed the local policy butto no avail
_____
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 15:23
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Graham-
The GP operational log officially taken over for userenv.log in Vista and
2008. There is still a log that provides the same ugly detail as userenv,
now called gpsvc.log. You might also google gplogview, which provides a
command-line/text-based view of the GP Operational Log. But to enable
gpsvc.log if you really like that trace log look and feel:
Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value Name: GPSvcDebugLevel
Value Type: REG_DWORD
Value Data: 30002 (hex)
It will log to the same place as userenv, but will be called gpsvc.log.
Darren
Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out
www.gpoguy.com-- the best source for GPO FAQs, video training, tools and
whitepapers. Also check out the Windows Group Policy Guide, the
definitive resource for Group Policy information.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 5:20 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] windows2008 userenvdebug
as subject looking to enable the 'userenvdebuglevel' of a windows server
2008 domain controller.
there seem to be different ways in which this now done in
windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier
versions
is this now valid on windows server 2008, as it seems we now need to look at
operational logs etc .
| | | |
| gturner
Posts:26
| | 05/27/2009 4:34 PM |
| no i can't
popup indicating "registry editing has been disabled by administrator" !
the 'prevent access to registry editing tools' is set to not configured every where i look
________________________________
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 16:16
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Not sure I follow? Do you mean you can't run regedit.exe?
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 7:37 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
darren, thanks for note back will give that a look
btw - not related but related !
how do i get to change the registry on w2k8 !
i changed the local policy butto no avail
________________________________
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 15:23
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Graham-
The GP operational log officially taken over for userenv.log in Vista and
2008. There is still a log that provides the same ugly detail as userenv,
now called gpsvc.log. You might also google gplogview, which provides a
command-line/text-based view of the GP Operational Log. But to enable
gpsvc.log if you really like that trace log look and feel:
Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value Name: GPSvcDebugLevel
Value Type: REG_DWORD
Value Data: 30002 (hex)
It will log to the same place as userenv, but will be called gpsvc.log.
Darren
Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out
www.gpoguy.com-- the best source for GPO FAQs, video training, tools and
whitepapers. Also check out the Windows Group Policy Guide, the
definitive resource for Group Policy information.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 5:20 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] windows2008 userenvdebug
as subject looking to enable the 'userenvdebuglevel' of a windows server
2008 domain controller.
there seem to be different ways in which this now done in
windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier
versions
is this now valid on windows server 2008, as it seems we now need to look at
operational logs etc .
| | | |
| Darren
Posts:103
| | 05/27/2009 4:55 PM |
| It must be there somewhere! Have you tried running GPMC GP Results wizard
against your user account on that computer? Worst case scenario you could
track down the underlying policy value in the registry and just delete it.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 8:30 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
no i can't
popup indicating "registry editing has been disabled by administrator" !
the 'prevent access to registry editing tools' is set to not configured
every where i look
_____
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 16:16
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Not sure I follow? Do you mean you can't run regedit.exe?
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 7:37 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
darren, thanks for note back will give that a look
btw - not related but related !
how do i get to change the registry on w2k8 !
i changed the local policy butto no avail
_____
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 15:23
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Graham-
The GP operational log officially taken over for userenv.log in Vista and
2008. There is still a log that provides the same ugly detail as userenv,
now called gpsvc.log. You might also google gplogview, which provides a
command-line/text-based view of the GP Operational Log. But to enable
gpsvc.log if you really like that trace log look and feel:
Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value Name: GPSvcDebugLevel
Value Type: REG_DWORD
Value Data: 30002 (hex)
It will log to the same place as userenv, but will be called gpsvc.log.
Darren
Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out
www.gpoguy.com-- the best source for GPO FAQs, video training, tools and
whitepapers. Also check out the Windows Group Policy Guide, the
definitive resource for Group Policy information.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 5:20 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] windows2008 userenvdebug
as subject looking to enable the 'userenvdebuglevel' of a windows server
2008 domain controller.
there seem to be different ways in which this now done in
windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier
versions
is this now valid on windows server 2008, as it seems we now need to look at
operational logs etc .
| | | |
| Syspro
Posts:0
| | 05/27/2009 11:11 PM |
| Hi Graham,
Have you checked in the registry whether the registry key is set?
Key Software\Microsoft\Windows\CurrentVersion\Policies\System
Valuename = DisableRegistryTools
You say that the policy is set to "Not configured" everywhere. Do you mean
"Not configured" in all policies, or "Not configured" in all polices for
this user?
It is possible that the default Profile has it set, but the nutser.pol file
in the default profile used by "Tattoo processing" to remove it does not
have it set.
Try swapping the user to a user that has the policy set, and logon, then
change them back again and check whether it is removed. If it then works
correctly, check your Default Profile to make sure that the nutser.pol file
is consistent with the default registry.
Alan Cuthbertson
Policy Management Software (Now with ADMX and Preference support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Thursday, 28 May 2009 1:53 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
It must be there somewhere! Have you tried running GPMC GP Results wizard
against your user account on that computer? Worst case scenario you could
track down the underlying policy value in the registry and just delete it.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 8:30 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
no i can't
popup indicating "registry editing has been disabled by administrator" !
the 'prevent access to registry editing tools' is set to not configured
every where i look
_____
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 16:16
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Not sure I follow? Do you mean you can't run regedit.exe?
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 7:37 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
darren, thanks for note back will give that a look
btw - not related but related !
how do i get to change the registry on w2k8 !
i changed the local policy butto no avail
_____
From: xxxxxxxxxxxxxxxx on behalf of Darren Mar-Elia
Sent: Wed 27/05/2009 15:23
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] windows2008 userenvdebug
Graham-
The GP operational log officially taken over for userenv.log in Vista and
2008. There is still a log that provides the same ugly detail as userenv,
now called gpsvc.log. You might also google gplogview, which provides a
command-line/text-based view of the GP Operational Log. But to enable
gpsvc.log if you really like that trace log look and feel:
Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics
Value Name: GPSvcDebugLevel
Value Type: REG_DWORD
Value Data: 30002 (hex)
It will log to the same place as userenv, but will be called gpsvc.log.
Darren
Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out
www.gpoguy.com-- the best source for GPO FAQs, video training, tools and
whitepapers. Also check out the Windows Group Policy Guide, the
definitive resource for Group Policy information.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Graham Turner
Sent: Wednesday, May 27, 2009 5:20 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] windows2008 userenvdebug
as subject looking to enable the 'userenvdebuglevel' of a windows server
2008 domain controller.
there seem to be different ways in which this now done in
windows2008.(specifically dc)
the 'userenvdebuglevel' value with 10002 used to be great on earlier
versions
is this now valid on windows server 2008, as it seems we now need to look at
operational logs etc .
| | | |
|
|