Configure Event Logging for a Windows NT Token-Based Application

Updated: January 31, 2008

Applies To: Windows Server 2008

On a Web server that is running the Active Directory Federation Services (AD FS) Web Agent for Windows NT token–based applications, you can configure the types of events that you want to be logged for Windows NT token–based applications.

Event logging is enabled differently for Windows NT token–based applications and claims-aware applications.

Use the following procedure to specify the types of events that you want to be logged for Windows NT token–based applications in the Application event log on the AD FS-enabled Web server. You set event logging for Windows NT token–based applications in the registry of the Web server.

Editing the registry incorrectly may damage your system severely. Before you make changes to the registry, back up any valued data on the computer.

Membership in Administrators, or equivalent, on the local computer is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (

  1. Open Regedit. Click Start, click Run, type regedit, and then click OK.

  2. Navigate to:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ifssvc\ Parameters

  3. Right-click Parameters, click New, and then click DWORD Value.

  4. In the new value file name box, type the following, and then press Enter:


  5. Double-click the new entry, and then, in Value data, provide a value for one of the following levels, or add values to configure multiple levels, and then click OK:

    • Warning: 0x01

    • Information: 0x02

    • Success: 0x04

    • Failure: 0x08

Community Additions