Enable Kerberos Debug

The instructions to enable the Kerberos Debug

1. Click Start, click Run, type regedit.exe and then press Enter

2. Open the following registry key:

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\kerberos\Parameters

3. Create the following entry:

Value:KerbDebugLevel
Type: DWORD
Data: c0000043 (this value will print the most standard set of debug messages)

4.  Create the following entry in the same registry location:

Value:LogToFile
Type: DWORD
Data:1

5. Restart the computer

6. Leave the machine 1 day to collect enough information to analyze

7. The file called lsass.log will create under \Windows\System32

OnlyIT

Advertisements