Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: DHCP database

Subject: RE: DHCP database
Date: Mon, 13 Jun 2005 18:07:37 +0100
If you  have DHCP Audit logging enabled (set via DHCP MMC Server properties)
then there are daily log files in the %system32%\dhcp folder.

Depending on what events you have set to audit in your security policy,
there may also be information in the Security Event log allowing you to map
the machine name to an IP.

HTH
Nick Batchelor
Network Manager
The Moat School ~ All dyslexic children can be helped to achieve.


-----Original Message-----
From: Tom Burns [mailto:tburns@TorcaUSA.com] 
Sent: 13 June 2005 17:41
To: focus-ms@securityfocus.com
Subject: DHCP database


Good morning,

I'm doing a security audit on a PC and need to cross reference what IP
address it had in December. Does anyone know how to look at the old dhcp
database (or any other files) to find out what IP address a computer was
assigned? I have backup tapes of the dhcp server.

The DHCP server is Windows 2000 with SP4.

Tom


---------------------------------------------------------------------------
---------------------------------------------------------------------------




---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>