Registry Path

Netlogon path

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

  1. Point to New, and then click String Value.
  2. Type DBFLAG, and then double-click the DBFLAG registry entry.
  3. In the Edit String box, type 2000FFFF in the Value data box.
  4. Exit Registry Editor
  5. Open the %systemroot%\Debug\Netlogon.log file in Notepad, and then search for the following error message:
  6. the client ClientComputerName$ is asking for NT4 crypto and this server disallows it.
  7. Disable debug logging for the NETLOGON service  Nltest.exe /DBFLAG:0

——————————– ————————–

Setting the maximum log file size for Netlogon logs: 

  • The MaximumLogFileSize registry entry can be used to specify the maximum size of the Netlogon.log file.
  • By default, this registry entry does not exist, and the default maximum size of the Netlogon.log file is 20 MB.
  • When the file reaches 20 MB, it’s renamed to Netlogon.bak, and a new Netlogon.log file is created.
  • This registry entry has the following parameters:
  • Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  • Value Name: MaximumLogFileSize Value Type: REG_DWORD Value Data: <maximum log file size in bytes
Remote Desktop port RDP port
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CurrentVersion

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\TCP/IP Port

recommended to run with fewer than 80 connection agreements per ADC server

RDP GRACE PERIOD DELETE:

 HKLM\System\CurrentControlSet\Control\Terminal Server\RCM 
 
If a key called ‘Grace Period’ is present, this means the license service has not correctly removed this entry which will force the server to always run in unlicensed mode. Simply delete the Grace Period key 

You may need to give permission to the admin account you are logged in as in order to delete the key or change ownership. The license server will then need rebooting but should allow the connections through after this You may then see the Grace Period key return after a reboot, the hotfix mentioned link will resolve this.
ProfileImagePath:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList.