How to monitor and audit DHCP Server configuration changes for compliance


DHCP Server of Windows Server 2008 R2, supports DHCP activity logging, that is it allows DHCP Administrators to monitor the configuration changes of the DHCP Servers.

Therefore the events pertaining to DHCP activity logging, will be logged with additional information like: Date and time of event occurrence, IP Address and host name of the DHCP Server on which the event occurred and user name of the administrator who made the change.

These events can be seen in the following location in eventviewer:
Applications and Services Logs > Microsoft > Windows > DHCP Server > Microsoft-Windows-DHCP Server Events/Operational

DHCP Administrators would use this feature for network security / IT compliance auditing purposes.
 

Download this tool to directly view all the activity logs in MMC.


Comments (5)

  1. Anonymous says:

    This tool can be used by DHCP Administrators to view all the events generated by Windows DHCP Server

  2. Omar says:

    dose it work with windows 2003 server

  3. tony says:

    **Pulling My Hair Out** I should have known to wait for R2. Oh well…

    Is there any plan to add DHCP auditing to R1 version of server 2008?

  4. azim says:

    awesome tool