DeviceLock Service : Managing DeviceLock Service for Windows : Service Options : Log Policy changes and Start/Stop events
  
Log Policy changes and Start/Stop events
You can enable the logging of changes in the DeviceLock Service’s configuration and report the time when DeviceLock Service starts and stops. It is possible to log changes in permissions, audit rules, white lists and in other settings.
To enable this kind of logging, enable the Log Policy changes and Start/Stop events parameter.