RRAS: Logging should be enabled on the RRAS server

Applies To: Windows Server 2008 R2, Windows Server 2012, Windows Storage Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Network Policy and Access Service (NPAS) Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer.

Operating System

Windows Server 2012, Windows Server 2008 R2

Product/Feature

Routing and Remote Access Service (RRAS)

Severity

Warning

Category

Configuration

Issue

Routing and Remote Access logging is disabled on the server.

Impact

If logging is disabled, then no errors or warnings are logged, making it difficult to troubleshoot problems on the RRAS server.

Resolution

Use 'Routing and Remote Access' in Server Manager to enable logging on the RRAS server.

When you enable logging, RRAS stores information about its operation in a set of files in the %windir%\tracing folder. You can configure RRAS to include all events, errors and warnings only, errors only, or disable logging completely. You can optionally enable detailed debugging information.

Note

The logs can be difficult to parse if you include too much information. We recommend that you configure the log for errors and warnings only, until you have a particular problem for which you need additional information.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To configure RRAS to enable logging

  1. Start Server Manager. Click Start, click Administrative Tools, and then click Server Manager.

  2. In the navigation tree, expand Roles, and then expand Network Policy and Access Services.

  3. Right-click Routing and Remote Access, and then click Properties.

  4. On the Logging tab, select Log errors only, Log errors and warnings, or Log all events, depending on how much information you want to capture.

  5. Click OK to save your changes.

Additional references

For more about the Routing and Remote Access role service, see Routing and Remote Access (https://go.microsoft.com/fwlink/?linkid=153482) on TechNet, and Routing and Remote Access Service in the Windows Server Technical Library.