RE: DHCP database

> You may need to use Jetpack.exe off the resource kit to compress the
> file....

Actually jetpack.exe is installed with this operating system and is in
the %systemroot%\system32 folder.

Regards,
Ryan Matijcio

-----Original Message-----
From: Kern, Tom [mailto:tkern@CHARMER.COM] 
Sent: Monday, June 13, 2005 3:55 PM
To: Tom Burns; focus-ms@securityfocus.com
Subject: RE: DHCP database

just redirect the restore of the dhcp.mdb file to another
server(perferably stand alone and not on the network) and install dhcp
on it and click on "action" and "restore" in the dhcp admin mmc and
browse to where you put the dhcp.mdb file.
open it in dhcp admin and you'll see the leases for that date with the
pc name and mac.

You may need to use Jetpack.exe off the resource kit to compress the
file....




Tom Burns wrote:
> Good morning,
>
> I'm doing a security audit on a PC and need to cross reference what IP
> address it had in December. Does anyone know how to look at the old
> dhcp database (or any other files) to find out what IP address a
> computer was assigned? I have backup tapes of the dhcp server.
>
> The DHCP server is Windows 2000 with SP4.
>
> Tom
------------------------------------------------------------------------
---
>
------------------------------------------------------------------------
---


------------------------------------------------------------------------
---
------------------------------------------------------------------------
---



---------------------------------------------------------------------------
---------------------------------------------------------------------------