• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1508
  • Last Modified:

DHCP Log Retention

I'm running Windows 2003 DHCP, I need to find out who got what IP going back at least 30 days. Is there a registry setting to increae the retention period for DHCP logs.  I don't what to use reservations.  I believe the default is  for 5 days.
0
wlyou
Asked:
wlyou
  • 2
1 Solution
 
PberSolutions ArchitectCommented:
No the log retension seems to be hardcoded to 1 week (possibly one of those undocumented keys).

See this:
http://technet2.microsoft.com/WindowsServer/f/?en/Library/b6a2649f-5448-4d09-b999-b8a5eed19fa91033.mspx

If you changed the value to 7 the logs would each be 1 MB in size for each day.  So if you are not getting a full days worth of logs, increase this value.

What you can do is setup a script to backup the logs to a different location.  Another method would be to go into your nightly/weekly backups if you have and navigate the the folder and restore the audit logs (to a different location) and you should be able to find who obtained that IP.
0
 
wlyouAuthor Commented:
Great advice, thank you.
0
 
PberSolutions ArchitectCommented:
not a problem
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now