Group Policy and Event Logs in Vista
In previous versions of Windows, Group Policy information was logged to the System log and additional troubleshooting information could be obtained by enabling Userenv.dll logging. In Windows Vista and later however, Group Policy logging has changed as follows:
- Events generated by the Group Policy engine during Group Policy processing are now logged in the Application event log. This information replaces Userenv.log which was difficult to parse on previous Windows platforms. Note that the event source for these events has changed from USERENV to Group Policy.
- Events generated by Group Policy extension DLLs are now logged to the Group Policy Operational event log. Of particular interest here are events in the range 7300-7999 which represent errors generated by extensions.