Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

DHCP Log Retention

Posted on 2006-06-15
3
Medium Priority
?
1,412 Views
Last Modified: 2008-03-03
I'm running Windows 2003 DHCP, I need to find out who got what IP going back at least 30 days. Is there a registry setting to increae the retention period for DHCP logs.  I don't what to use reservations.  I believe the default is  for 5 days.
0
Comment
Question by:wlyou
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 26

Accepted Solution

by:
Pber earned 1000 total points
ID: 16984282
No the log retension seems to be hardcoded to 1 week (possibly one of those undocumented keys).

See this:
http://technet2.microsoft.com/WindowsServer/f/?en/Library/b6a2649f-5448-4d09-b999-b8a5eed19fa91033.mspx

If you changed the value to 7 the logs would each be 1 MB in size for each day.  So if you are not getting a full days worth of logs, increase this value.

What you can do is setup a script to backup the logs to a different location.  Another method would be to go into your nightly/weekly backups if you have and navigate the the folder and restore the audit logs (to a different location) and you should be able to find who obtained that IP.
0
 

Author Comment

by:wlyou
ID: 16987207
Great advice, thank you.
0
 
LVL 26

Expert Comment

by:Pber
ID: 16987216
not a problem
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question