Software

Ask something
Question Locked

DHCP Audit Log Issue and DDNS Update Issue.

0 helpful
6 replies

by Former member

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a perceived need by our security department to track DHCP more closely with Auditing. SO I need the logs to go for 90 days not a week (How Do I do this?). I also have the issue of the logs not showing the MAC Address (See Below). How do I get the MAC Address to show in the logs?

30, 12/21/07, 00:00:13, DNS Update Request, X.X.X.X, PC1.monkeyworld.com,,

Another reason the security group wants to return to Static addresses is DHCP is not update DNS like it should. I keep getting the following error messages in the Audit logs:

31, 12/21/07, 00:00:13, DNS Update Failed, X.X.X.X, PC3.monkeyworld.com,,-1,

So about 25% of our workstations have no A record. This is s a big deal for the security admins. How do I get it fixed?

6 replies

by thumbsup2

What is currently running your DHCP? Server? If so, what OS? Router? What logs are you looking at?

by Former member

DHCP is being ran on W2K3 Enterprise Server on a DELL PLatform.

The logs that I gave shown are located at the C:\WINDOWS\system32\dhcp they are the audit logs.

by cg it

hope you have the capacity to store em.

Do you allow only secure updates from clients? AD intergrated?

by Former member

If someone was threaten to take you to static ip address you would find the storage for logs. But yes we got plenty of space.

Yes they are AD Integrated and Secure.

by cg it

for the zone and clients do not update DNS records check to make sure your DNS client service is started.

Also, make sure option 81 is used.

Also verify that dynamic DNS updates is configured in DHCP. In DHCP, click DNS, click Properties, click to select the Enable DNS dynamic updates according to the settings below check box, and then click Always dynamically update DNS A and PTR records.

Last but not least, make sure DNS and DHCP are allowed through the firewall on client computers.

Note: I wouldn't care if the powers that be wanted to go to a static addressing scheme. It's more administrative work sure but you also know who you issued an IP address to and what computer.

This discussion is closed to new replies.