首页 / 编程脚本 / vbs AD日志开启脚本nableKerbLog的脚本
Dim wsObj
Set wsObj = CreateObject("Wscript.Shell")
" Add the LogLevel Value to Kerberos Key in Registry.
On Error Resume Next
WScript.Echo "Enabling Kerberos Logging..."
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics1 Knowledge Consistency Checker",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics2 Security Events",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics3 ExDS Interface Events",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics4 MAPI Interface Events",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics5 Replication Events",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics6 Garbage Collection",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics7 Internal Configuration",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics8 Directory Access",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics9 Internal Processing",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics10 Performance Counters",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics11 Initialization/Termination",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics12 Service Control",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics13 Name Resolution",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics14 Backup",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics15 Field Engineering",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics16 LDAP Interface Events",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics17 Setup",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics18 Global Catalog",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics19 Inter-site Messaging",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics20 Group Caching",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics21 Linked-Value Replication",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics22 DS RPC Client",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics23 DS RPC Server",3,"REG_DWORD"
wsObj.RegWrite "HKLMSYSTEMCurrentControlSetServicesNTDSDiagnostics24 DS Schema",3,"REG_DWORD"
Set wsObj = Nothing
WScript.Echo "-=[Complete!]=-"