Audit DHCP Server log running Windows Server 2022

Donate Us : paypal.me/MicrosoftLab

Audit DHCP Server log running Windows Server 2022

1. Prepare

– DC21 : Domain Controller(Yi.vn) | DC22 : DHCP Server

– WIN111, WIN112 : Client recive IP from DHCP Server

2. Step by step : Audit DHCP Server log on DC22

– DC22 : Enable DHCP audit logging

+ Server Manager – Tools – DHCP – DC22.Yi.vn – Right-click IPv4

– Properties – General tab – Check “Enable DHCP audit logging” – OK

+ Check DHCP log :

+ File Explorer – C: drive – Windows – System32 – DHCP – DhcpSrvLog ( Event ID 10 ) :

+ WIN111 : Release IP. Start – cmd – ipconfig /release === check DhcpSrvLog (Event ID 12 )

+ WIN111 : Request IP. Start – cmd – ipconfig /renew === check DhcpSrvLog ( Event ID 10 )

+ IPv4 – Delete WIN112 === check DhcpSrvLog ( Event ID 16 )

———————******************** Youtube.com/c/MicrosoftLab ********************—————-