Are DHCP Lease Reservation configuration changes logged as an Event?

Marcelo 1 Reputation point
2021-06-03T19:06:27.72+00:00

We are trying to determine the user-ID and when the DHCP Lease Reservation configuration for a specific IP address range was changed. So far we've not been able to find any log of the configuration change. Does some configuration need to be enabled or is it already enabled by default and what log file can we find the information of the config changed? Thanks in advance.

Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
1,023 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jiang Zhang 786 Reputation points
    2021-06-04T10:48:39.12+00:00

    Hi,
    I think you are trying to determine the user-ID when the DHCP Lease Reservation configuration was changed. Down below I will suggest two methods of locating the configuration change log.

    The following is how I configure DHCP Reservation in Windows Server and the log of this configuration change.
    102468-image.png
    102485-image.png
    102486-image.png

    You can be either from C:\Windows\System32\Winevt\Logs\Microsoft-Windows-Dhcp-Server%4Operational.evtx

    102487-image.png
    102488-image.png
    102524-image.png

    or from Event Viewer: Applications and Services Logs>Microsoft>Windows>DHCP-Server>Microsoft-Windows-DHCP Server Events/Operational

    102489-image.png
    102416-image.png
    102469-image.png

    Best Regards,
    Mulder Zhang

    --------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments