Configure Logging and Tracing
You can centrally configure optional logging and tracing for Advanced Group Policy Management (AGPM) using Administrative templates.
A user account with the AGPM Administrator (Full Control) role, the user account of the Approver who created the GPO used in these procedures, or a user account with the necessary permissions in Advanced Group Policy Management is required to complete these procedures. Additionally, a user account with access to the AGPM Server is required to initiate logging on the AGPM Server. Review the details in "Additional considerations" in this topic.
To configure logging and tracing for AGPM
In the Group Policy Management Console tree, edit a GPO that is applied to all Group Policy administrators for which you want to turn on logging and tracing. (For more information, see Editing a GPO.)
In the Group Policy Object Editor, click Computer Configuration, Administrative Templates, and Windows Components.
If AGPM is not listed under Windows Components:
Right-click Administrative Templates and click Add/Remove Templates.
Click Add, select agpm.admx or agpm.adm, click Open, and then click Close.
Under Windows Components, double-click AGPM.
In the details pane, double-click AGPM Logging.
In the AGPM Logging Properties window, click Enabled, and configure the level of detail to record in the logs.
Click OK.
Close the Group Policy Object Editor. (For more information, see Deploy a GPO.) After Group Policy is updated, you must restart the AGPM Service to begin logging on the AGPM Server. Group Policy administrators must close and restart the GPMC to begin logging on their computers.
Trace file locations:
Client: %LocalAppData%\Microsoft\AGPM\agpm.log
Server: %ProgramData%\Microsoft\AGPM\agpmserv.log
Additional considerations
- You must be able to edit and deploy a GPO to configure AGPM logging and tracing. See Editing a GPO and Deploy a GPO for additional detail.
Additional references