Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
Use Registry Editor (Regedt32.exe) to view the
following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit
Add the following registry value to the preceding registry key:
Value Name: PolicyDebugLevel
Data Type: REG_DWORD
Radix: Decimal
Value: 2
(0 - no logging, 1 - errors only, 2 - verbose)
Note: The log file is generated in the
%SystemRoot%\Security\Logs\Scepol.log file when LSA APIs are called. Scepol.log
defaults to 1MB in size. To increase the maximum size, add the following
registry value to the preceding registry key:
Value Name: PolicyLogSize
Data Type: REG_DWORD
Radix: Decimal
Value: 1024 (in Kb, the minimum value is 1024 (1MB); if it is less than this, the value is ignored)