RE: DHCP database
From: Mr Batchelor (batchelornpe_at_moatschool.org.uk)
Date: 06/13/05
- Previous message: Aaron Thomas: "RE: DHCP database"
- In reply to: Tom Burns: "DHCP database"
- Next in thread: Laura A. Robinson: "RE: DHCP database"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: <focus-ms@securityfocus.com> Date: Mon, 13 Jun 2005 18:07:37 +0100
If you have DHCP Audit logging enabled (set via DHCP MMC Server properties)
then there are daily log files in the %system32%\dhcp folder.
Depending on what events you have set to audit in your security policy,
there may also be information in the Security Event log allowing you to map
the machine name to an IP.
HTH
Nick Batchelor
Network Manager
The Moat School ~ All dyslexic children can be helped to achieve.
-----Original Message-----
From: Tom Burns [mailto:tburns@TorcaUSA.com]
Sent: 13 June 2005 17:41
To: focus-ms@securityfocus.com
Subject: DHCP database
Good morning,
I'm doing a security audit on a PC and need to cross reference what IP
address it had in December. Does anyone know how to look at the old dhcp
database (or any other files) to find out what IP address a computer was
assigned? I have backup tapes of the dhcp server.
The DHCP server is Windows 2000 with SP4.
Tom
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Aaron Thomas: "RE: DHCP database"
- In reply to: Tom Burns: "DHCP database"
- Next in thread: Laura A. Robinson: "RE: DHCP database"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
