NPS Logs

[blin]

I am sure there is a simple explanation, but I can't seem to find any logs on my NPS server. I've configured the accounting settings and don't get a log file, I also don't see anything related to NPS in the event log. As far as I can tell I have the correct services running. I should be seeing activity as I have two NAP client configured.

[blin]

Scratch the question. All the lights suddenly came on without me doing anything. Must have just been thinking for several hours.

[blin]

For future reference, the default configuration (after installing NPS and configuring a few policies) will generate event logs from NPS.

They will be located in the System event log store, with the Event Source of NPS.

[blin]

Could you please tell me where can I view NPS log file ?

[blin]

NPS log file created under %winroot%\Windows\System32\Logfiles

to change this directory

1. Open NPS console.

2. under Accounting choose Logfiles

3. click on it and choose the location you want.

4. Click Ok,

5. Close NPS console

[blin]

Is there a standard for how logging should be done from a SHV on the NPS server? For example, when a client is considered "unhealthy" and should be quarantined, we would like to log it.

Should this be done in the windows event logger? With what IDs for the NAP system?

Thoughts?

[blin]

Once the logging is enabled to file, how can the content be viewed/parsed? Existing IASparse.exe for Windows2003 does not work.

If logging to SQL, which type of SQL server(s) is supported? I have not done logging to SQL before, how could content of SQL log be viewed/parsed?

[blin]

You can find the NPS log in "Server Manger" too. start your server manager click on Roles -> click Network Policy Access Service -- On the right side log is available...

[blin]

Not sure what happen but logging to C:\Windows\System32\LogFiles\IN*.log is not happening any more. Did See a few event in Network Policy Access Services, but now, no more events or logging to file... ??? Any one, any ideas where to go from here? Thanks.

[blin]

I have pointed for other quick method to view "Network Policy and Access Service" events, if you will click on "Network Policy and Access Service" then at the right side there is samll window which can show all the events related to NPS, example if a NAP compliant client try to access the domain a log will create here( client machine name, user name, ip address..etc..) and in the same order if client will fail to access the domain a log will create here you can see the reason why client can not access the domain.