Start/notes.ini Parameters/DEBUG_POLICY

DEBUG_POLICY

🛠️
Parameter: DEBUG_POLICY
Short description: Enables debug output for policy processing on server and client (resolution of effective policies, inheritance, conflicts).

Profile

Parameter
DEBUG_POLICY
Category
Logging / Debug
Component
Client, Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
notes.ini only (no GUI)
Possible values
0 = off, 1 = on

Description

DEBUG_POLICY turns on detailed debug messages around policy processing. It makes it possible to trace which policies (explicit, organizational, dynamic) are resolved for a user, in which order they take effect, and which settings ultimately land in the desktop policy or in the PolicyResultsCache. On the server, the parameter takes effect during policy sync (e.g. dyninfo, adminp requests, mail settings); on the client, it affects the application of the desktop policy at startup.

Example configuration

DEBUG_POLICY=1

Notes & pitfalls

  • Produces a lot of output – enable only temporarily for diagnosis, and disable again afterwards.
  • On the client, additionally combine with DEBUG_OUTFILE=... to redirect the output to a file.
  • Helpful in combination with the console command tell adminp show policy or the dyninfo tool.
  • Sensitive data (user names, groups, mail settings) is logged – handle the logs accordingly.