IAM built for the AI-Era
Logo

Debug Logging

You can configure Specops Client components to log their internal activity to a verbose debug log. This log allows you to follow the events leading up to an error.

Debug logging is enabled by changing the relevant registry key from its default value of 0 to 1. You can increase the level of detail further by using the higher debug levels 2 or 3.

Below is a list of the registry settings used by the Specops Client.

Registry Key Description
HKLM\Software\Specopssoft\uReset
\Client\Logging\Debug
 Enables logging for processes that run under the context of the logged in end user.

  • Password Reset / uReset Key Feature: Enrollment reminders
  • Password Policy Key Feature: Password expiration reminders

Log file location:
%localappdata%\Specopssoft\Specops.Authentication.Client.log
HKLM\Software\Specopssoft\uReset
\Client\Mfa\Logging\Debug
 Enables logging for Secure Access - MFA for Windows.

Log file location:
C:\Windows\debug\SpecopsWinMfa\<user>\<timestamp>\WinMfa.App.log
HKEY_LOCAL_MACHINE\SOFTWARE\Specopssoft
\uReset\Client\CredentialProvider\Logging
\Debug		 Enables logging for the features that rely on the Specops Client credential provider (Windows login screen, lock screen, ctrl+alt+del password change).

  • Password Reset / uReset Key Features:
    • Creation of the Reset Password… link or logon tile at the login & lock screens
    • Launching the Secured Browser when the Reset Password… link or logon tile is clicked
  • Password Policy Key Feature: Detailed feedback during ctrl+alt+del password changes

Log file location:
%WINDIR%\debug\sppcredentialprovider [LOGONUI].log
%WINDIR%\debug\spptiledcredentialprovider [LOGONUI].log
HKEY_LOCAL_MACHINE\SOFTWARE\Specopssoft
\uReset\Client\SecuredBrowser\Logging\Debug		 Enables logging for the Secured Browser launched when the Reset Password… link is clicked.

  • Password Reset / uReset Key Features: Navigation in the browser that launches when clicking the Reset Password… link/tile
  • Password Policy Key Features: N/A

Log file location:
%WINDIR%\debug\securedbrowser [SECUREDBROWSER].log

Note that if running secured browser under the network service account, it is necessary to grant write permission for the network service account to the c:\windows\debug folder
HKEY_LOCAL_MACHINE\SOFTWARE\Specopssoft
\uReset\Client\RulesUI\Logging\Debug
 Enables logging for the dynamic feedback during Change Password from Windows.

Log file location:
%windir%\debug\ClientRules.app.log