Debug Logging

You can configure Specops Client components to log their internal activity to a verbose debug log. This log allows you to follow the events leading up to an error.

Debug logging is enabled by changing the relevant registry key from its default value of 0 to 1. You can increase the level of detail further by using the higher debug levels 2 or 3.

Below is a list of the registry settings used by the Specops Client.

Registry Key	Description
HKLM\Software\Specopssoft\uReset \Client\Logging\Debug	Enables logging for processes that run under the context of the logged in end user. Password Reset / uReset Key Feature: Enrollment reminders Password Policy Key Feature: Password expiration reminders Log file location: `%localappdata%\Specopssoft\Specops.Authentication.Client.log`
HKLM\Software\Specopssoft\uReset \Client\Mfa\Logging\Debug	Enables logging for Secure Access users. Log file location: `%localappdata%\Specopssoft\Mfa\WinMfa.Launcher.log` `%localappdata%\Specopssoft\Mfa\WinMfa.App.log`
HKEY_LOCAL_MACHINE\SOFTWARE\Specopssoft \uReset\Client\CredentialProvider\Logging \Debug	Enables logging for the features that rely on the Specops Client credential provider (Windows login screen, lock screen, ctrl+alt+del password change). Password Reset / uReset Key Features: Creation of the Reset Password… link or logon tile at the login & lock screens Launching the Secured Browser when the Reset Password… link or logon tile is clicked Password Policy Key Feature: Detailed feedback during ctrl+alt+del password changes Log file location: `%WINDIR%\debug\sppcredentialprovider [LOGONUI].log` `%WINDIR%\debug\spptiledcredentialprovider [LOGONUI].log`
HKEY_LOCAL_MACHINE\SOFTWARE\Specopssoft \uReset\Client\SecuredBrowser\Logging\Debug	Enables logging for the Secured Browser launched when the Reset Password… link is clicked. Password Reset / uReset Key Features: Navigation in the browser that launches when clicking the Reset Password… link/tile Password Policy Key Features: N/A Log file location: `%WINDIR%\debug\securedbrowser [SECUREDBROWSER].log` Note that if running secured browser under the network service account, it is necessary to grant write permission for the network service account to the c:\windows\debug folder
HKEY_LOCAL_MACHINE\SOFTWARE\Specopssoft \uReset\Client\RulesUI\Logging\Debug	Enables logging for the dynamic feedback during Change Password from Windows. Log file location: `%windir%\debug\ClientRules.app.log`