I regularly troubleshoot Windows NT 4.0 remote access problems. I'm familiar with the NT 4.0 RAS logging options on the server side. However, I'd like to have a set of RAS-related log files on the client side. Which NT RAS client-side logging options are available?
Microsoft provides two RAS-specific logging options for NT 4.0 clients: the Point-to-Point Protocol (PPP) log and the device log. Both options are disabled by default, but you can use a registry hack to enable them. Both options log events to a text file, independently of the standard NT 4.0 auditing system (i.e., you can't use NT Event Viewer to view their output).
The PPP log records all PPP-related events to the ppp.log file, which resides in \%systemroot%\system32\ras. To enable PPP logging, set the Logging REG_DWORD registry value to 1. You can find this value in the HKEY_ LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP registry subkey.
The device log records all communication between serial ports and the devices connected to them in command mode. Like ppp.log, device.log resides in \%systemroot%\system32\ ras. To enable device logging, set the Logging REG_DWORD registry value to 1. You can find this value in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\ Parameters registry subkey.
