Event ID 109 — Windows NT Token-Based Application Logging

  • Article

Applies To: Windows Server 2008 R2

You can use Active Directory Federation Services (AD FS) log files to troubleshoot issues with the Windows token-based agent. The creation and updating of AD FS log files are monitored here.

Event Details

Product: Windows Operating System
ID: 109
Source: Microsoft-Windows-ADFS
Version: 6.1
Symbolic Name: WSA_FailureSettingUserNameHdr
Message: A failure was encountered while trying to set the user name custom header.
User Name: %1

Additional Data The data field contains the Win32 error code.

Resolve

Configure the agent for logging

Make sure that AD FS Windows NT Token Web Agent is configured to generate logs.

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To enable logging:

Caution: Incorrectly editing the registry might severely damage your system. Before making changes to the registry, you should back up any valued data.

  1. On the Web server, click Start.
  2. In the Start Search text box, type regedit, and then press ENTER.
  3. Navigate to the following key in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ifssvc\Parameters.
  4. Right click Parameters, point to New, and click DWORD Value.
  5. Name this new parameter DebugPrintLevel.
  6. Double-click the new entry, and then, in Value data, type FFFF to enable full logging.
  7. Click OK, and then close Registry Editor.

Verify

Verify that Active Directory Federation Services (AD FS) log files have been generated in the log files directory. The log files directory is referred to in the following location in the registry:

DebugLevel Dword "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ifssvc\Parameters"

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To verify the location of the log files directory in the registry:

Caution: Incorrectly editing the registry might severely damage your system. Before making changes to the registry, you should back up any valued data.

  1. On the Web server, click Start.
  2. In the Start Search text box, type regedit, and then press ENTER.
  3. Click the following key in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ifssvc\Parameters and then verify the location of the log files directory.
  4. Click OK, and then close Registry Editor.

Windows NT Token-Based Application Logging

Active Directory Federation Services