You cannot use IIS Manager to configure the logging settings for the ADFS Web Agent in Windows Server 2003 (911687)



The information in this article applies to:

  • Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)
  • Microsoft Windows Server 2003 R2 Standard x64 Edition
  • Microsoft Windows Server 2003 R2 Enterprise x64 Edition

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

You cannot use Microsoft Internet Information Services (IIS) Manager to configure the logging settings for the Active Directory Federation Services (ADFS) Web Agent.

WORKAROUND

To work around this issue, use either of the following methods.

Method 1: To configure the logging settings for a claims-based application

To configure the logging settings for a claims-based application, modify the application's Web.config file. To do this, add code that is similar to the following sample code:
<system.diagnostics>
    <switches>
      <add name="WebSsoDebugLevel" value="15" />
    </switches>
    <trace autoflush="true" indentsize="3">
      <listeners>
        <add name="ADFSLogListener" type="System.Web.Security.SingleSignOn.BoundedSizeLogFileTraceListener, System.Web.Security.SingleSignOn, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, Custom=null" initializeData="C:\adfsapps\webapps1\sts.log" />
      </listeners>
    </trace>
</system.diagnostics>
Note When you add the code, use the settings that you want to configure instead of the settings in the sample code.

Method 2: To configure the logging settings for a Windows NT token-based application

To configure the logging settings for a Windows NT token-based application, modify the registry. To do this, follow these steps.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
  1. Click Start, click Run, type regedit, and then click OK.
  2. In Registry Editor, locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\WebSso\Parameters

  3. On the Edit menu, point to New, and then click DWORD Value.
  4. Type DebugLevel to name the new entry.
  5. Double-click DebugLevel, and then type FFFFFFFF in the Value data box.
  6. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ifssvc\Parameters

  7. On the Edit menu, point to New, and then click DWORD Value.
  8. Type DebugPrintLevel to name the new entry.
  9. Double-click DebugPrintLevel, and then type FFFFFFFF in the Value data box.
  10. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADFS\WebServerAgent

  11. On the Edit menu, point to New, and then click DWORD Value.
  12. Type DebugPrintLevel to name the new entry.
  13. Double-click DebugPrintLevel, and then type FFFFFFFF in the Value data box.
  14. Quit Registry Editor.

Modification Type:MajorLast Reviewed:12/28/2005
Keywords:kbtshoot kbprb KB911687 kbAudITPRO kbAudDeveloper