Enable Kerberos Logging in Event Viewer
- Open the Registry Editor (regedit.exe)
- Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
- Add a new DWORD Value called “LogLevel” set the value to 1
- The logging should start without any reboot
After you have completed your testing delete the LogLevel key reboot the server to ensure you stop logging.