How to Enable Kerberos Event Logging

Microsoft Windows 2000 and Microsoft Windows Server 2003 offer the capability of tracing detailed Kerberos events through the event log mechanism. You can use this information when you troubleshoot Kerberos.

Public URL:
262177 How to enable Kerberos event logging
http://support.microsoft.com/?id=262177

Value Path: HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Value Name: LogLevel
Value Type: REG_DWORD
Value Data: 1 (hex)
Output: System event log
Note: If the Parameters subkey does not exist, create it.
Note: Remove this registry value when it is no longer needed so that performance is not degraded on the computer. Also, you can remove this registry value to disable Kerberos event logging on a specific computer.