I mentioned at last nights "Active Directory Diagnosis Troubleshooting and Recovery" Technet session how to turn NTDS diagnostic logging on which causes the KCC to write events to the event log. All the information plus more besides is published in Knowledgebase article 314980.