DHCP Audit Login
- How Audit Logging Works
- Naming Audit Log Files
- Starting a Daily Audit Log
- Disk Checks
- Ending a Daily Audit Log
Windows 2000 DHCP servers include several new logging features and server parameters that provide enhanced auditing capabilities. You can now specify the following features:
-
The directory path in which the DHCP server stores audit log files.
-
A maximum size restriction (in megabytes) for the total amount of disk space available for all audit log files created and stored by the DHCP service.
-
An interval for disk-checking that is used to determine how many times the DHCP server writes audit log events to the log file before checking for available disk space on the server.
-
A minimum size requirement (in megabytes) for server disk space that is used during disk-checking to determine whether sufficient space exists for the server to continue audit logging.
Note
You can selectively enable or disable the audit-logging feature at each DHCP server.
Only the directory path in which the DHCP server stores audit log files can be modified using the DHCP console. To do so, first select the applicable DHCP server in the console tree. Next, click Properties on the Action menu. Finally, click the Advanced tab and edit the Audit log file path, as necessary.
Other audit-logging parameters described previously are adjusted through Registry-based configuration changes. For more information on the Windows 2000 DHCP server Registry, see the Windows 2000 Server Resource Kit.
How Audit Logging Works
The audit-logging behavior discussed in this section applies only to the DHCP Server service provided with Windows 2000 Server. It replaces the previous DHCP logging behavior used in earlier versions of Windows NT Server, which do not perform audit checks, and use only a single log file named Dhcpsrv.log for logging service events.
The formatted structure of DHCP server logs and the level of reporting maintained for audited logging are the same as in earlier DHCP server versions provided with Windows NT Server.