While troubleshooting a Sharepoint Kerberos/SPNEGO issue, I came across a post here which mentions enabling of logging of the SPNEGO process.

This is supported on Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2.  Apparently it might also work with a checked build of lsasrv.dll on Windows XP.

Steps to enable SPNego Logging:

Save the below text with .reg file extension and then execute the file to import its contents into registry. This would create lsass.log file under %windir%system32 directory.

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
“SPMInfoLevel”=dword:0000101F
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
“LogToFile”=dword:00000001
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberos]
“LogToFile”=dword:00000001
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters]
“LogToFile”=dword:00000001
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters]
“LogLevel”=dword:00000001
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberos]
“LogLevel”=dword:00000001
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
“NegEventMask”=dword:0000000F
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters]
“LogLevel”=dword:00000001
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberos]
“LogLevel”=dword:00000001

I would recommend making a backup of those keys before hand, since you will want to turn off this logging after you have resolved your issue.

This is the first I have heard of this key “SPMInfoLevel”, and unfortunately searching around, the above post is the only reference I find for it. ¬†If anyone comes across more information on it, please post a comment.

  • prada

    Here elaborates the matter not only extensively but also detailly .I support the
    write's unique point.It is useful and benefit to your daily life.You can go those
    sits to know more relate things.They are strongly recommended by friends.Personally
    I feel quite well.. http://www.prada-outlet-store.com

  • This is supported on Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2.