how to debug user logons – Windows 2003
Add the followign registry key
Subkey: HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon
Entry: UserEnvDebugLevel
Type: REG_DWORD
Value data: 10002 (Hexadecimal)
UserEnvDebugLevel can have the following values:
NONE 0x00000000
NORMAL 0x00000001
VERBOSE 0x00000002
LOGFILE 0x00010000
DEBUGGER 0x00020000
Saved to – %Systemroot%DebugUserModeUserenv.log
URL Reference: http://support.microsoft.com/kb/221833/en-us