Windows – Windows 7 wireless connection event logs

loggingwindows 7wireless-networking

I'm trying to diagnose and test some a Windows 7 domain-auth-over-wireless-network. I'd like to see what network the computer is connecting to, what auth it is using, and what DHCP data it receives prior to user login, and also what happens after user login. Does event viewer show this info? Do I need to enable it anywhere?

Cheers,

Victor

Best Answer

They are sort of all over the place.

DNS resolution is going to be in the Window Logs/System. DHCP will be under Applications/Microsoft/Windows/DHCP Client. Other logon issues will also show up under Window Logs/System.

Your best bet is to go under Custom Views and setup a Custom view with keywords you are looking for. I would go with keywords like "LSA", "DNS Client", "DHCP Client, etc

It isn't going to record what wireless protocol it is using.

That's the job of WMI. You can just write a VBscript that enumerates through all the network driver's info and writes it to a log every time your logon event fails.

You'll also want to turn off your logon cache.

edit

So, apparently Windows logs a long list info if you try a click the Network troubleshooter on a wireless connection.

  1. The name of the driver, and whether it is WQHL
  2. the SSID
  3. Signal Strength
  4. CHannel
  5. Wireless protocol
  6. List of wireless networks saved on your computer
  7. IP settings

So now it is a matter of invoking the Network Diagnosis feature to get all that.

It should be logged under Applications/Microsoft/Windows/Diagnostics-Networking. It also logs an event under Windows/System

Sorry for the unresearched answer earlier.

Happy Hunting.

Related Question