How to monitor and audit DHCP Server configuration changes for compliance

DHCP Server of Windows Server 2008 R2, supports DHCP activity logging, that is it allows DHCP Administrators to monitor the configuration changes of the DHCP Servers.

Therefore the events pertaining to DHCP activity logging, will be logged with additional information like: Date and time of event occurrence, IP Address and host name of the DHCP Server on which the event occurred and user name of the administrator who made the change.

These events can be seen in the following location in eventviewer:
Applications and Services Logs > Microsoft > Windows > DHCP Server > Microsoft-Windows-DHCP Server Events/Operational

DHCP Administrators would use this feature for network security / IT compliance auditing purposes.
 

Download this tool to directly view all the activity logs in MMC.

Comments

• Anonymous
  January 01, 2003
  This tool can be used by DHCP Administrators to view all the events generated by Windows DHCP Server

• Anonymous
  January 01, 2003
  www.centrel-solutions.com/.../capabilities.aspx

• Anonymous
  April 02, 2009
  dose it work with windows 2003 server

• Anonymous
  May 21, 2009
  Pulling My Hair Out I should have known to wait for R2. Oh well... Is there any plan to add DHCP auditing to R1 version of server 2008?

• Anonymous
  August 06, 2012
  awesome tool