Solved

DHCP Log Retention

Posted on 2006-06-15
3
1,361 Views
Last Modified: 2008-03-03
I'm running Windows 2003 DHCP, I need to find out who got what IP going back at least 30 days. Is there a registry setting to increae the retention period for DHCP logs.  I don't what to use reservations.  I believe the default is  for 5 days.
0
Comment
Question by:wlyou
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 26

Accepted Solution

by:
Pber earned 250 total points
ID: 16984282
No the log retension seems to be hardcoded to 1 week (possibly one of those undocumented keys).

See this:
http://technet2.microsoft.com/WindowsServer/f/?en/Library/b6a2649f-5448-4d09-b999-b8a5eed19fa91033.mspx

If you changed the value to 7 the logs would each be 1 MB in size for each day.  So if you are not getting a full days worth of logs, increase this value.

What you can do is setup a script to backup the logs to a different location.  Another method would be to go into your nightly/weekly backups if you have and navigate the the folder and restore the audit logs (to a different location) and you should be able to find who obtained that IP.
0
 

Author Comment

by:wlyou
ID: 16987207
Great advice, thank you.
0
 
LVL 26

Expert Comment

by:Pber
ID: 16987216
not a problem
0

Featured Post

10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question