Using the Windows Netlogon service debug option to diagnose BCAAA problems
How to monitor communication between the BCAAA service, the Netlogon service and the Domain Controller.
The BCAAA service is used to authenticate proxy users within a Windows domain but it does not itself communicate with a Domain Controller. Instead, BCAAA communicates with its local Windows Netlogon service to perform user authentication. Although the BCAAA service provides a method to write its own debug information (see KB2934) it can be useful to know what the Netlogon service itself is sending to a Domain Controller. Microsoft's NLTEST.EXE program allows debugging to be enabled on the Netlogon service. How to do this is described in the Microsoft article KB109626 (with KB189541 providing information on possible error codes).
Netlogon debugging should be enabled on the BCAAA server. By looking at the results of the Netlogon.log file, you can monitor authentication events. (Note that this log file can become large very quickly so it is advisable to enable logging only during testing).
The following are example entries found in the Netlogon.log file during failed and successful login attempts.
06/06 12:41:02 [LOGON] VDOMAIN: SamLogon: Network logon of (null)\johndoe from W2K3-DC1 Entered
Rate this Page
Please take a moment to complete this form to help us better serve you.