Windows Server TechCenter > Windows Server Forums > Network Access Protection > Is there a way to enable more indepth logging?
Ask a questionAsk a question
 

AnswerIs there a way to enable more indepth logging?

  • Thursday, September 17, 2009 5:21 PMgunnarwb Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    The most common issue I run into is the "Network Policy Server denied access to a user" with a reason of "The connection attempt did not match any network policy."  As far as I can tell I do have a policy setup for this exact user (workstation), however, nothing seems to make it work.  I've had it where all I have to do is reboot the server then the workstation works, however that doesn't work all the time.  In any case, is there a way to enable logging so it gives me more information in order to help me troubleshoot this?

Answers

  • Saturday, September 19, 2009 6:17 AMSrini MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi Gunnar,

    I believe you already looked at the even viewer to see what the NPS has logged in there. You can enable tracing to get into details on what NPS is doing, You have to give the following command "netsh ras set tr * en". Once you do this, NPS will log all the tracing information under c:\windows\tracing.

    Thanks,
    Srinivasulu.

All Replies

  • Thursday, September 17, 2009 5:31 PMgunnarwb Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    BTW: The only that I've been able to do that is helpful in this regard is to use tail.exe on the C:\Windows\System32\LogFiles\IN0909.log file.  This is somewhat helpful but was wondering if there was something more.
  • Saturday, September 19, 2009 6:17 AMSrini MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi Gunnar,

    I believe you already looked at the even viewer to see what the NPS has logged in there. You can enable tracing to get into details on what NPS is doing, You have to give the following command "netsh ras set tr * en". Once you do this, NPS will log all the tracing information under c:\windows\tracing.

    Thanks,
    Srinivasulu.

  • Monday, September 21, 2009 2:16 PMgunnarwb Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thank you!