Community Pick: Many members of our community have endorsed this article.

Enterprise log files locations

Log files are useful in diagnosing and repairing problems.  This is a list of common log files and their standard locations that I've compiled.   While this is not exhaustive, it is a pretty good list that I've found to be useful.  I may update it from time to time.  I'm also including some usage notes.

DRAC Logs  (Dell Remote Access Controller)
    Racadm getconfig –f c:\config.txt
    Racadm Getraclog > c:\raclog.txt
    Racadm Gettracelog > c:\tracelog.txt

Web Parts Settings
Gadgets are movable and can be on or off

    C:\Program Files\Windows Small Business Server\Data\RemoteAccessProfiles
    C:\Program Files\Windows Small Business Server\Bin\WebApp\RemoteAccess\Customization\Product\custom.xml

Log Location
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\ERRORLOG.txt
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\DCPromo_###.txt
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\ExtSchemaTask.txt
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\GPOTask.txt
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\FaxSPRouteSnapin.InstallLog
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\MoveDataPSsnapin.InstallLog
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\pop3connectorInstall
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\SBSSetup.txt
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\FinishSetup.txt
   C:\Program Files\Windows Small Business Server\Logs \SBS\Logs\SBSHook.txt

RWW (Remote Web Workplace)
C:\Program Files\Windows Small Business Server\Logs\WebApp\RemoteAccess.log

Installation element        Notes
Binary Path                      %Program Files%\Windows SBS 7 Migration Preparation Tool\
Shortcut path                   Windows SBS 7 Migration Preparation Tool\
Log Path                           %Temp%\Migration Preparation Logs\
App name                        Windows SBS 7 Migration Preparation Tool

Migration answer key failure
    C:\Users\DonFunk\AppData\Local\Temp\Migration Preparation Logs\).

    C\Program Files\Windows Small Business Server\Logs\DPCW.txt

Connect VPN wizard
    C:\Program Files\Windows Small Business Server\Logs\VPNCW.txt.

Trusted certificate
    C:\Program Files\Windows Small Business Server\Logs\TrustedCert.txt.

Fix My network wizard
    C:\Program Files\Windows Small Business Server\Logs\fncw.txt.

Cluster Logs

Active Directory

This registry key has the location of the DIT file and AD LOG files.

Windows Installer
    Msiexec <misname> /l*v c:\testlog.log
        Logging : voicewarmupx
        v - Verbose output
        o - Out-of-disk-space messages
        i - Status messages
        c - Initial UI parameters
        e - All error messages
        w - Non-fatal warnings
        a - Start up of actions
        r - Action-specific records
        m - Out-of-memory or fatal exit information
        u - User requests
        p - Terminal properties
        + - Append to existing file
        ! - Flush each line to the log

Diagnostic logging
    1.  Open the Exchange System Manager
    2.  * Drill Down To Administrative Groups
    3.  * First Administrative Group
    4.  Servers
    5.  Find your Server e.g. Paris
    6.  Properties, Diagnostic Logging Tab
    7.  (None), Minimum, Medium, Maximum

    ESEUTIL – Place into Path statement.
    Program Files\Microsoft\Exchange Server\Bin
        D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\Mailbox Database.edb"
    Exporting the virtual directories.
        Exports are saved in Program Files\Microsoft\Exchange Server\V14 as a text file:

IIS Troubleshooting
Tools > Internet Options, choose the Advanced tab, and clear the Show friendly HTTP error messages

To see ASP errors add this to the web.config file
                         <customErrors mode=”Off” />

Open in new window

Start>Run>inetmgr.exe -> selecting your website/application/virtual directory in the left-hand tree view, clicking on the “Error Pages” icon, clicking “Edit Feature Settings” action, and then selecting “Detailed Errors”.
Run in an elevated command line:
%windir%\system32\inetsrv\appcmd.exe set config "Default Web Site/yourapp" /section:httpErrors /errorMode:Detailed

Open in new window

Return to normal when done:
%windir%\system32\inetsrv\appcmd.exe set config "Default Web Site/yourapp" /section:httpErrors /errorMode:DetailedLocalOnly

Open in new window

Add the IIS tracing service:
    Server Manager, Roles, Web Server(IIS),  Add Role Services, check Web Server\Health and
    Diagnostics\Tracing (Then you can rt click under actions and click failed tracing)

Logs located in
   appcmd list site
... then ...

    Program Files\Microsoft SQL Server\MSSQL\Log

SCCM (System Center Configuration Manager)

** if you encounter problems, and you want assistance, please post the installation logs - you'll find them here:

SQL SERVER install log files
    C:\program files\microsoft SQL server\100\setup Bootstrap\log\date_random\summary_host_random.txt

WSUS (Windows Server Update Services)
How to read the log files:
For the server:
    C:\Program Files\Update Services\Logfiles
and the Application Event Log
For the client:
and the Application Event Log

2008 Install logs

During installation, Shift-F10 will get you a command prompt. Plug and Play should be working, so you can copy any log files to a USB drive.

During the install, if the error happens:

Before local disk selection, look in:
%Windir%\Panther (specifically, \UnattendGC\Setupact.log, but it’s better to just get the entire \Panther directory). Before a local disk is selected, %Windir% will almost always be on X: drive. This is on the RAM disk created by WinPE.
Before the first reboot, get (from the hard drive you are installing to):
After the reboot, get:
%Windir%\Panther\*.* (at this point, %Windir% is usually C:.)

Installing hotfixes, features or Windows updates:
cbs.log and (possibly) cbs.persist.log. These are limited to 50 Mb in size and are in:

An additional log for Windows updates is:

Two additional servicing logs are available in

Central Administration > Operations > Diagnostics Logging
Logs are at
    C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\LOGS

STSADM will spit logs here.
    %temp% logs
    C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\Logs\Upgrade.log

SharePoint file location may need to edit – this is where the SharePoint lives
    C:\Program Filecommon files\microsoft shared\web server extensions\14\bin

Application Failures
%temp% logs

Debug for net logon;EN-US;109626

NT Replication service log Ntfrsapi.log
    %SystemRoot%\Debug folder
        0 is default logging and 5 is verbos

Mount the AD database

SMTP logs

SIM logs – For Altiris
    C:\Program Files\Dell\sysmgt\dmc\Notification Server\Logs\a.log
    C:\Documents and Settings\<Username>\Local Settings\Temp\SIM Logs\
    Program Files\Altiris\Symantec Installation Manager\Installs|Altiris\

List logs old then a day
cd /; find /vmfs/volumes/ -name vmware-*.log -mtime +1 -exec ls  {} \;

WSUS (more info on...)
Log file location
WSUS Client Diagnostic Tool direct download link:

Run the following batch file on them to ensure there is no duplicate SID (WSUS SID is different than a machine SID)

%Windir%\system32\net.exe stop bits 
                      %Windir%\system32\net.exe stop wuauserv 
                      %Windir%\system32\net.exe stop cryptsvc 
                      del %WINDIR%\WindowsUpdate.log /S /Q  
                      reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
                      reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
                      reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
                      reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v LastWaitTimeout /f
                      reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v DetectionStartTime /f
                      reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v NextDetectionTime /f 
                      rd /s /q %windir%\softwareDistribution
                      %Windir%\system32\net.exe start cryptsvc
                      %Windir%\system32\net.exe start bits 
                      %Windir%\system32\net.exe start wuauserv 
                      wuauclt /resetauthorization /detectnow
                      wuauclt /reportnow 
                      exit /B 0  

Open in new window

GPO (Group Policy Objects)
Location on the server
1. In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

2. In the details pane, double-click Specify intranet Microsoft update service location.

3. Click Enabled, and type the HTTP URL of the same WSUS server in the Set the intranet update service for detecting updates box and in the Set the intranet statistics server box. For example, type http://servername in both boxes.

4. Click OK.


   Troubleshoot IIS7 errors like a pro
    How do I troubleshoot SharePoint?
    How To Check SMTP Logs in Windows Server    

    Which ESX log file

Comments (0)

Have a question about something in this article? You can receive help directly from the article author. Sign up for a free trial to get started.