Skip navigation

JSI Tip 3824. How do I get Windows 2000 to log SceCli activity during Group Policy processing?

The Windows 2000 Security Configuration Client ( SceCli) configures group membership, user rights, and security policy, like password policy and account restrictions, that have been set using Group policy.

To cause SceCli to log to %SystemRoot%\Security\Logs\Winlogon.log:

1. Use Regedt32 to navigate to

2. On the Edit menu, Add Value name ExtensionDebugLevel, a REG_DWORD data type, and set the data value to 2.

3. In the Start / Run box, type secedit /refreshpolicy machine_policy /enforce

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.