DHCP Audit Logging
Applies To: Windows Server 2008
DHCP servers running Windows Server 2008 have several logging features and server parameters that provide enhanced auditing capabilities. You can specify the following logging parameters:
The directory path in which the DHCP server stores audit log files. By default, DHCP audit logs are located in %windir%\System32\Dhcp.
A maximum size restriction (in megabytes) for the total amount of disk space available for all audit log files created and stored by the DHCP service.
An interval for disk checking that is used to determine how many times the DHCP server writes audit log events to the log file before checking for available disk space on the server.
A minimum size requirement (in megabytes) for server disk space to determine if sufficient space exists for the server to continue audit logging.
You can selectively enable or disable the audit logging feature at each DHCP server. The directory path in which the DHCP server stores audit log files can be modified using the DHCP console; other audit logging parameters are adjusted through registry-based configuration changes.