What are the advanced CSE troubleshooting registry debugging items?
Netwrix Endpoint Policy Manager (formerly PolicyPak) supports some special troubleshooting registry keys. Typically, you would only need to set this at the request of Endpoint Policy Manager Tech Support.
| Key | HKLM\Software\Policies\PolicyPak\Config\Licensing |
| Value | NoTrial |
| Type | REG_DWORD |
| Data | 1 = disable trial (even if computer has "computer" in its name) |
| Purpose | This is useful for testing but not as useful for customers. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\ProcessFilter |
| Value | Enabled |
| Type | REG_DWORD |
| Data | 0 = disable process |
| Purpose | Stop the PolicyPak driver from loading. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\Minidumps |
| Value | Disable |
| Type | REG_DWORD |
| Data | 1 = disable creation of custom minidump files |
| Purpose | Stop automatic Minidump of Endpoint Policy Manager items even if Windows Minidumps are set. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\Minidumps |
| Value | DefaultType |
| Type | REG_DWORD |
| Data | Bitmask |
| Purpose | This value affects the content and size of minidumps. Don't adjust unless Endpoint Policy Manager Tech Support supplies a value. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\CSE |
| Value | EnableGPNotifications |
| Type | REG_DWORD |
| Data | 1 = enable GP notifications |
| Purpose | This settings requires Win8 or newer. When GP notifications are enabled, logging on again and/or rebooting are not required to apply a policy. But under some conditions, enabling notifications may cause deadlocks, which could lead to unexpected long login delay. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\CSE |
| Value | ExtendedLogs |
| Type | REG_DWORD |
| Data | 1 = enable plaintext logs |
| Purpose | This is only a Endpoint Policy Manager Application Settings Manager setting. This enables creation of plaintext logs in addition to report-style/block-style logs. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\Logs |
| Value | DefaultVerbose |
| Type | REG_DWORD |
| Data | 0xFFFFFFFF = Enable output of all available message types to the log files. |
| Purpose | For performance reasons, it's not possible to enable TRACE output in release builds. Therefore, this value only works with DEBUG builds. Ask Endpoint Policy Manager Tech Support if you suspect you need a DEBUG build. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\CSE\ILT |
| Value | BypassAllILT |
| Type | REG_DWORD |
| Data | 1 = all ILT filters are ignored and implicitly evaluated to TRUE |
| Purpose | Useful if directed by support to have all ILT evaluations succeed. Useful for troubleshooting and testing. |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\CSE\ILT |
| Value | Timeout |
| Type | REG_DWORD |
| Data | ILT timeout in milliseconds. |
| Purpose | If ILT evaluation time exceeds the timeout, the previous evaluation result is used by the CSE. When the Timeout value is not set in the registry, it defaults to 500ms (0.5 seconds). |
| --- | --- |
| Key | HKLM\Software\Policies\PolicyPak\Config\CSE\ILT |
| Value | Lifetime |
| Type | REG_DWORD |
| Data | ILT cache lifetime in milliseconds. |
| Purpose | CSE doesn't re-evaluate ILT filter if it was evaluated less than Lifetime milliseconds ago. When Lifetime is not set in the registry, it defaults to 5000ms (5 seconds). |