Approved: Fortect
In this user guide, we will learn about some of the possible causes that can lead to debugging Netlogon, and then I will suggest several possible ways to solve this problem.
- 5 minutes Trafone to read
This text describes the steps to enable logging through the Netlogon
service on Windows for tracking, as well as trackingTroubleshooting authentication errors, domain controller locators, account lockouts, or other connectivity issues in the domain.
Applies to: Windows 10 – All editions, Windows Server 2016, Windows Server 2019, Next Year Windows Server R2
Original Knowledge Base Number: 109626
Additional Information
A copy of Netlogon.dll containing the trace is installed by default on all versions currently supported by Windows. To enable debug logging, set the debug flag, which is typically required for Nltest.exe, registry, group, and / or policy. To do this, follow a few steps:
For Windows Server 2019, Windows Server 2016, Windows Server R2
Approved: Fortect
Fortect is the world's most popular and effective PC repair tool. It is trusted by millions of people to keep their systems running fast, smooth, and error-free. With its simple user interface and powerful scanning engine, Fortect quickly finds and fixes a broad range of Windows problems - from system instability and security issues to memory management and performance bottlenecks.
- 1. Download Fortect and install it on your computer
- 2. Launch the program and click "Scan"
- 3. Click "Repair" to fix any issues that are found
Open a Command Prompt window in 2012 (Administrative Command Prompt window for Windows Server 2012 R2 and later).
-
Type the following command and press Enter:
Nlttest / DBFlag: 2080FFFF
-
There is still no need to stop and restart a specific
Netlogon
service for Windows Server 2012 R2 and even later to runNetlogon
to activate it. The associated network input is considered registered This activity in% windir% debug netlogon.log. Select the New check box for this log to determine if this is a specific restart of theNetlogon
service. If you need to restart the website, open a Command Prompt window (Administrative Command Prompt window for Windows 10 and Windows Server 2012 R2 and later). Then run the following commands:netstop netlogonclean starting point
Note
- In some cases, you may need to authenticate to the system to get a new log entry to ensure that logging is probably enabled.
- Using the computer name may cause new test record authentication not to be written.
-
Open a Command Prompt window (Administrative Command Prompt window for Windows 2012 Server R2 and later).
-
Type the following command and press Enter:
Nltest / DBFlag: 0x0
-
There is usually no need to host and restart the
Netlogon
service to get Windows Server 2012 R2 or later, whichThe first thing you get when you turn offNetlogon
is registration support. Network logon activities are reflected in% windir% debug netlogon.log. Make sure there are no instructions in this log to determine if your currentNetlogon
service needs to be restarted. If you need to restart the service, open a Command Prompt window (Administrative Command Prompt window in Windows 10 and Windows Server 2012 R2 and later). Then run the important commands:netstop netlogonnet-netlogon
Alternative Launch Methods for Netlogon Logging License
-
On all Windows versions, your family members can use the enabled / disabled logging method in the laptop or computer logging method heading.
-
On computers running Windows Server 2012 R2 and later operating systems, you can also take full advantage of the following policy setting to enable verbose
Netlogon
logging (the value is in bytes) :Computer Configuration Administrative Templates System Net Logon Set the log file debug output level
Activate / Deactivate by logging in using the registration method
You may need a verified version of Netlogon.dll to enable logging.
-
Start Registry Editor.
-
When you know it exists, remove the Reg_SZ value from the current registry entry below, create a REG_DWORD sales price with the same name, then add the hex value 2080FFFF:
HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services Netlogon Parameters DBFlag
-
There is usually no need to stop and restart the
Netlogon
service that supports Windows Server 2012 R2 and later in order to useNetlogon
– Activate Recording. The task associated with the network logon is logged in% windir% debug netlogon.log. Check the entries in this log to determine if a reasonable restart of theNetlogon
service is required. If you need to restart the lists, open a Command Prompt window (Administrative Command Prompt window for Server Windows 2012 R2 / Windows 10 and later). Then do c The following shutdown commands are:network loginnet start netlogon
-
In Registry Editor, change the data value for the following registry key to 0x0:
HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services Netlogon Parameters DBFlag
-
Close the registry editor.
-
It is not necessary to stop and restart anyone’s
Netlogon
service for Windows Server 2012 R2, Ten, Windows or later to startNetlogon
> Disable maintenance magazine. Netlogon-related activities are actions that are logged so that they can be saved to% windir% debug netlogon.log. Ensure that no new information is written to this log to determine if a restart of theNetlogon
service is required. If you need to restart the service, open a Command Prompt window (Administrative Command Prompt window for Windows Server next year R2 / Windows 10 and later versions of their operating system). Then run the application commands:netstop netlogonnet start netlogon
-
The MaximumLogFileSize register with which the street can be used determines the most Larger Netlogon.log file. By default, de – This registry entry does not exist, and the default maximum size of the Netlogon.log history is 20 MB. If the file is actually 20 MB, it will be renamed to Netlogon.bak, but a new Netlogon.log file will also be created. be created. This registry entry has the following parameters:
- Path:
HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services Netlogon Parameters
- Value name: MaximumLogFileSize
- Value type: REG_DWORD
- Value data:
- Path:
-
Remember that the space used by
Netlogon
when writing is the same as the size specified in this maximum log file size multiplied by double (2). It is needed to host Netlogon.log and Netlogon.bak files. For example, a large setting of 50 MB may require 100 MB of disk space, which will show up in MB for Netlogon.log and 50 MB for Netlogon.bak. -
As mentioned earlier, on this year’s Windows Server R2 and later, you can use the following theme parameter to configure the file protocol type (the value is in bytes ):
Computer Configuration Administrative Templates System Net Logon Maximum Log File Size
For more information, see the following article numbers in the Microsoft Knowledge Base:
247811 This is how domain controllers in Windows
This class, method, or task contains steps that explain how to modify the registry. However, serious problems can arise if the registry is improperly improved. Therefore, be sure to follow these steps carefully. Added to the name of the protection, backing up the registry before the client changes it. Then you can restore the registry if you run into problems. For various information about backups when restoring the registry,
Speed up your computer's performance now with this simple download.
To enable Netlogon logging: Open the Command Prompt door (Administrative Command Prompt window for Windows Server next year R2 and later). For some complaints, you may need to allow the system to create a new log entry to ensure that logging is enabled.
Right click on Computer and select Manage.In the navigation tree, click Server Manager> Configuration> Services.Make sure the Netlogon service is running.
Netlogon is a service provided by the local security agency that runs in the background. It takes care of user authentication on the blog. You can also assign a logon file to a specific user or member in the logon file so you can see the user’s logon activity.