RE: DHCP database

From: Kern, Tom (tkern_at_CHARMER.COM)
Date: 06/13/05

  • Next message: Beauford, Jason: "RE: E-Mail gateway on IIS." 
    Date: Mon, 13 Jun 2005 15:55:05 -0400
To: "Tom Burns" <tburns@TorcaUSA.com>, <focus-ms@securityfocus.com>

    just redirect the restore of the dhcp.mdb file to another server(perferably stand alone and not on the network) and install dhcp on it and click on "action" and "restore" in the dhcp admin mmc and browse to where you put the dhcp.mdb file.
    open it in dhcp admin and you'll see the leases for that date with the pc name and mac.

    You may need to use Jetpack.exe off the resource kit to compress the file....

    Tom Burns wrote:
    > Good morning,
    >
    > I'm doing a security audit on a PC and need to cross reference what IP
    > address it had in December. Does anyone know how to look at the old
    > dhcp database (or any other files) to find out what IP address a
    > computer was assigned? I have backup tapes of the dhcp server.
    >
    > The DHCP server is Windows 2000 with SP4.
    >
    > Tom
    >
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Beauford, Jason: "RE: E-Mail gateway on IIS."

    Relevant Pages

    • Re: Preventing DHCP from allocating IPs
      ... Each segment is physically separate with a Linux ... unknown MAC addresses firstly don't get a DHCP ... >> wants access to your network, they will have to come to you to obtain ...
      (Security-Basics)
    • Re: Secure your DHCP
      ... I can only think of allocating via dhcp reservation using network card ... Create an exclusion of your whole DHCP scope (So no IP's are free to be ... assign each mac address an Ip address from what was in your pool. ...
      (microsoft.public.windows.server.sbs)
    • Re: static IP addresses on LAN
      ... One Mac is an intel iMac, ... it is connected to the network and internet... ... If I instead configure it to use DHCP, then it gets assigned the wrong IP ... The other possibility is that you have more than 1 router. ...
      (comp.sys.mac.system)
    • Re: works on desk computer but not on wireless laptop
      ... RARP server, the DHCP server, or manually? ... So I chose that and now it wants to know the DHCP Client ID. ... And a 12 character number like a Mac ID. ... The OEM computer MAC address is the same as the DHCP ...
      (alt.internet.wireless)
    • Re: Iptables port 5353 -
      ... I would think she must have access to the DNS server provided by ... don't recall what was done and I am lost whenever I use her Mac ... ... server supplied by the DHCP server. ...
      (Fedora)