1. Open Windows Explorer, right-click the debug folder, and select Properties.
2. Switch to the Security tab.
3. If the account used by the previously mentioned application pool is not present, click Edit, Add.
4. Type the account name and grant Full Permissions on the folder.

1. Click Start, Run, type regedit and click OK.
2. Navigate to one of the following locations:
    
   • On 32-bit operating systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McAfee PortalShield\trace
      
   • On 64-bit operating systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McAfee PortalShield\trace 
      
3. Double-click the EnableWrapperLog entry and set the value to 1.
4. Close the registry editor.

• The Debug logs folder specified above
• A full MER for McAfee Security for Microsoft SharePoint.

• Is your SharePoint installation standalone or Farm-based?
• How many servers are present in the Farm and what are their roles? (for example SharePoint Central Admin, Web Front End [WFE], Database Server, and so on)
• If using multiple servers such as in a Farm setup, briefly describe the topology.
• Which servers have the MSMS product installed?
• What version of MSMS is installed on the problem servers? See KB52484 to help with version identification.
• What is the version and edition of SQL Server used for the SharePoint installation and Configuration and Content databases? See the following Microsoft KB article to identify the version and edition details of SQL Server: http://support.microsoft.com/kb/321185.
   

1. If the server is managed by ePO, stop McAfee Framework Service. It stops ePO policies from overwriting local settings.
2. Open Windows Explorer and create a folder where your diagnostic log files get stored.
   For example: D:\PortalShieldLogs.
3. Click Start, Run, type Regedit, and click OK.
4. Navigate to one of the following locations:
    
   • On 32-bit operating systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McAfee PortalShield\trace 
      
   • On 64-bit operating systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McAfee PortalShield\trace
    
5. Locate the Path string value. If it does not exist, right-click in the right pane and select New, String Value. Name the new value Path.
6. Double-click Path and type the location of the folder you created in the Value data field.
   For example: 
   D:\MSMSDebugLog.
   
   NOTE: If the Path value data is omitted, the PortalShield diagnostic logs are written to the default folder: \Program Files\McAfee\McAfee PortalShield\bin. 
    
7. Click OK.
8. Locate the Level DWORD value. (If it does not exist, right-click in the right pane and select New, DWORD Value. Name the new value Level.)
9. Double-click Level and type 3 in the Value data field.
10. Close the registry editor.

1. Make a note of the account used by the PSPickerx64srv module. (The RunScheduledx64.exe process is loaded under the PSPickerx64Srv module.) To generate the Wrapper Logs successfully, the account used by PSPickerx64srv must have the rights on the Debug Folder.
2. To determine the account used by the PSPickerx64srv module, click Start, Run, type dcomcnfg.msc and click OK.
3. In the Component Services window, expand Component Services, Computers, My Computer, DCOM Config.
4. Locate PSPickerx64srv in the right pane, right-click it and select Properties.
5. Switch to the Identity tab. The user account must be listed under This User.
6. Click Start, Run, type Regedit and click OK.
7. Navigate to the following location:
    
   • On 32-bit operating systems:
     [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McAfee PortalShield\trace]
      
   • On 64-bit operating systems:
     [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McAfee PortalShield\trace] 
      
8. Double-click EnableWrapperLog and set the value to 1.
9. Close the registry editor. 

1. Open Windows Explorer, right-click the debug folder and select Properties. Click the Security tab.
2. If the account used by the application pool is not present, click Edit and then click Add.
3. Enter the account name and grant Full Permissions on the folder.

• Debug logs folder specified above
• A full MER for McAfee Security for Microsoft SharePoint.

IMPORTANT: To reduce the load on the server, disable diagnostic logging after all relevant logs have been captured or the issue has been resolved.

To disable diagnostic logging:

1. Click Start, Run, type Regedit and click OK.
2. Navigate to the following location:
    

   • On 32-bit operating systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McAfee PortalShield\trace 
      
   • On 64-bit operating systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\McAfee PortalShield\trace 
      
3. Double-click the Level DWORD value and set the Value data to 0.
4. Close the registry editor