Configure Shortcuts preference logging and tracing: registry value LogLevel and 5 more (CSE_Shortcuts_Logging~GroupPolicyPreferencesLogging)ComputerHKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}

Policy ID: CSE_Shortcuts_Logging
Scope: Computer Configuration
Supported on: At least Windows Server 2003 operating systems or Windows XP Professional with SP2
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: System › Group Policy › Logging and tracing

Registry

LogLevel

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Current key

Enabled value: Depends on the option value
Element: Event logging

Options
Item	Stored value
Informational, Warnings and Errors	3
Warnings and Errors	2
Errors Only	1
None	0

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}]

; Options (use only one)
; Informational, Warnings and Errors
"LogLevel"=dword:00000003
; Warnings and Errors
"LogLevel"=dword:00000002
; Errors Only
"LogLevel"=dword:00000001
; None
"LogLevel"=dword:00000000

CMD

:: Options (use only one)

:: Informational, Warnings and Errors
reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "LogLevel" /t REG_DWORD /d 3 /f
:: Warnings and Errors
reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "LogLevel" /t REG_DWORD /d 2 /f
:: Errors Only
reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "LogLevel" /t REG_DWORD /d 1 /f
:: None
reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "LogLevel" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Force | Out-Null

# Options (use only one)
# Informational, Warnings and Errors
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'LogLevel' -PropertyType DWord -Value 3 -Force | Out-Null
# Warnings and Errors
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'LogLevel' -PropertyType DWord -Value 2 -Force | Out-Null
# Errors Only
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'LogLevel' -PropertyType DWord -Value 1 -Force | Out-Null
# None
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'LogLevel' -PropertyType DWord -Value 0 -Force | Out-Null

TraceLevel

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Current key

Enabled value: Depends on the option value
Element: Tracing

Options
Item	Stored value
On	2
Off	0

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}]

; Options (use only one)
; On
"TraceLevel"=dword:00000002
; Off
"TraceLevel"=dword:00000000

CMD

:: Options (use only one)

:: On
reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "TraceLevel" /t REG_DWORD /d 2 /f
:: Off
reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "TraceLevel" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Force | Out-Null

# Options (use only one)
# On
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'TraceLevel' -PropertyType DWord -Value 2 -Force | Out-Null
# Off
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'TraceLevel' -PropertyType DWord -Value 0 -Force | Out-Null

TraceFilePathUser

REG_EXPAND_SZComputer

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Current key

Enabled value: Depends on the option value
Element: User trace
Value type: REG_EXPAND_SZ
Expandable string (REG_EXPAND_SZ): true

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
; hex(2) and hex(7) data must be written as hexadecimal (UTF-16LE)
"TraceFilePathUser"=hex(2):<enter value>

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "TraceFilePathUser" /t REG_EXPAND_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'TraceFilePathUser' -PropertyType ExpandString -Value '<enter value>' -Force | Out-Null

TraceFilePathMachine

REG_EXPAND_SZComputer

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Current key

Enabled value: Depends on the option value
Element: Computer trace
Value type: REG_EXPAND_SZ
Expandable string (REG_EXPAND_SZ): true

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
; hex(2) and hex(7) data must be written as hexadecimal (UTF-16LE)
"TraceFilePathMachine"=hex(2):<enter value>

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "TraceFilePathMachine" /t REG_EXPAND_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'TraceFilePathMachine' -PropertyType ExpandString -Value '<enter value>' -Force | Out-Null

TraceFilePathPlanning

REG_EXPAND_SZComputer

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Current key

Enabled value: Depends on the option value
Element: Planning trace
Value type: REG_EXPAND_SZ
Expandable string (REG_EXPAND_SZ): true

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
; hex(2) and hex(7) data must be written as hexadecimal (UTF-16LE)
"TraceFilePathPlanning"=hex(2):<enter value>

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "TraceFilePathPlanning" /t REG_EXPAND_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'TraceFilePathPlanning' -PropertyType ExpandString -Value '<enter value>' -Force | Out-Null

TraceFileMaxSize

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Current key

Enabled value: Depends on the option value
Element: Maximum size of trace file (KB)
Value type: REG_DWORD
Maximum value: 16384

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"TraceFileMaxSize"=dword:<enter value>

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" /v "TraceFileMaxSize" /t REG_DWORD /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}' -Name 'TraceFileMaxSize' -PropertyType DWord -Value '<enter value>' -Force | Out-Null