Enable LDAP server events logging using GPO

Enable LDAP server event logging using Group Policy.

1. On a domain controller or a system with Remote Server Administration Tools (RSAT) installed, open the Group Policy Management Console (GPMC).
2. Create a new Group Policy Object (GPO): Right-click on the domain or organizational unit (OU) where your domain controllers reside, then select Create a GPO in this domain, and Link it here.... Give it a descriptive name, e.g. Domain Controller Registry Settings.
3. Edit the GPO.

   1. Right-click on the newly created GPO and select Edit.

      

      image33.png
   2. In the Group Policy Management Editor, navigate to Computer Configuration → Preferences → Windows Settings → Registry.

      

      image18.png
   3. Add Registry Items: Right-click on Registry and select New → Registry Item.

      

      image36.png
   4. Configure Registry Keys: For each of the registry keys you want to set, create a new Registry Item.

\[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics\]

    Create the following Registry item:

    **15 Field Engineering**

    - **Action:** Update

    - **Hive:** HKEY_LOCAL_MACHINE

    - **Key Path:** SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics

    - **Value name:** 15 Field Engineering

    - **Value type:** REG_DWORD

    - **Value data:** 5

    ![image19.png](../../../.gitbook/assets/a34e9651338b1bfb12952f5f54fa7e5372c0c8091da611292512df65e5fba1c5.png)

    </details>