enable windows 2000\2003 Logging
1. Use Regedt32 to navigate to:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\SecEdit
2. On the Edit menu, Add Value name PolicyDebugLevel, as a REG_DWORD data type. Set the data value to 2.
3. The log file will be generated as:
%SystemRoot%\security\logs\Scepol.log