Enable Kerberos Auditing In Windows Server 2003

To enable Kerberos event logging on a computer
[ ] Open your registry editor:
[ ] Add the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters registry key
Set the value of the registry key to LogLevel
Set the value type of the key to REG_DWORD
Set the contents (data) to 0×1
Close Registry Editor and restart the computer

To disable Kerberos event logging
[ ] Delete the Delete the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters\LogLevel registry key