I'm curious if the KDC Proxy service, which operates using HTTP.sys, generates detailed request logs similar to what you would find in IIS. I know about the error logs located at C:WindowsSystem32LogFilesHTTPERR, but they only capture errors, not every request. Does anyone have insight on this?
1 Answer
You might want to check out the Microsoft documentation on enabling Kerberos event logging. It provides some useful information that could be helpful for tracking requests, although it's not exactly the same as IIS logging.
Are you certain this applies to the KDC Proxy specifically? I thought it was more general.