Group Policy and Event Logs in Vista

In previous versions of Windows, Group Policy information was logged to the System log and additional troubleshooting information could be obtained by enabling Userenv.dll logging. In Windows Vista and later however, Group Policy logging has changed as follows:

  • Events generated by the Group Policy engine during Group Policy processing are now logged in the Application event log. This information replaces Userenv.log which was difficult to parse on previous Windows platforms. Note that the event source for these events has changed from USERENV to Group Policy.
  • Events generated by Group Policy extension DLLs are now logged to the Group Policy Operational event log. Of particular interest here are events in the range 7300-7999 which represent errors generated by extensions.

About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top