12: How do I turn on Item Level Targeting (ILT) logging if asked by PolicyPak Tech Support?

All of PolicyPak’s ILT evaluations use Microsoft's Group Policy Preferences (GPPrefs) to actually perform the work.

To perform the work, the GPPrefs Registry extension is actually used in conjunction with any PolicyPak ILT evaluation.

If asked by tech support to turn on Group Policy Preferences ILT evaluation tracing please perform these steps (and only do it for the Group Policy Preferences Registry extension):

Follow these steps below to turn on TRACING logs for the GPPrefs Registry extension. If you only need to do this on one or two machines, choose Option 1. If you need to compare multiple machines’ logs then you can use Option 2.

Option 1: Turning it on LOCALLY on one machine.

1. Run GPEDIT.MSC as Administrator on the machine where you need to enable logging. Then expand “Computer Configuration > Policies > Administrative Templates > System > Group Policy > Logging and tracing”, then double-click on “Registry Policy Processing”.

2. Then enable “Registry Policy Processing” and turn “Tracing” on as shown below.

Note: If “Logging and tracing” are missing then you first need to download and install the “preferences.msi” from https://www.microsoft.com/en-us/download/details.aspx?id=14355

After installing the “preferences.msi” copy “C:\Program Files (x86)\Microsoft Group Policy\Preferences\PolicyDefinitions\GroupPolicyPreferences.admx” to “C:\Windows\PolicyDefinitions” and “C:\Program Files (x86)\Microsoft Group Policy\Preferences\PolicyDefinitions\en-us\grouppolicypreferences.adml” to “C:\Windows\PolicyDefinitions\en-US”. Then close and reopen “Local Group Policy Editor (GPEDIT.MSC) and now the “Logging and tracing” should be present.

Option 2: Turning it on for a LOT of machines.

1. Using the Group Policy Management Console (GPMC) edit the Group Policy you have assigned to the Computer OU where the computers live that you need to enable logging for, or create a new GPO at that level specifically to enable logging.

2. Expand “Computer Configuration > Policies > Administrative Templates > System > Group Policy > Logging and tracing”, then double-click on “Configure Registry preference logging and tracing”

3. Then enable “Configure Registry preference logging and tracing”, and turn “Tracing” on as shown below.

Note: The default location for all three log files is “%COMMONAPPDATA%\GroupPolicy\Preference\Trace” however, the variable %COMMONAPPDATA% is not recognized within Windows, it is only used by GPPrefs client side extensions.

To verify TRACING is enabled for the GPPrefs Registry extension, log on to a computer where the logging policy you just created/edited is applied, then run CMD, then run GPUPDATE.

Then verify the Group Policy Preferences logs are present at: “C:\ProgramData\GroupPolicy\Preference\Trace”

Tip: You can also run “GPRESULT /R /SCOPE COMPUTER” to see if the Group Policy applied to the computer.

When done you can turn it off by setting the policy setting back to “Not Configured”.