Windows Server 2012, DHCP with MAC whitelist, unauthorized MAC not appearing in log

I have a windows 2012 server, running DHCP service, with MAC whitelisting (the "Allow" list)

whitelist functions correctly, unauthorized MAC are ignored

logging is fine I can see it in windows\system32\dhcp,

DHCP requests from MAC not on whitelist, they get ignored, but Im *not* seeing a log entry documenting these unauthorized MAC address dhcp requests.

is there some switch/setting to log these?
Christopher Ellis, CISSP, GPEN, GCIH, GREM, GCFA, GCFEForensic AnalystAsked:
Who is Participating?
 
Tom CieslikIT EngineerCommented:
No, unfortunately only registered IP from pool can be seen in log.
There is nothing like false request login in log.
0
 
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Tom Cieslik (https:#a42444570)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.