DHCP server registry-based configuration changes

(Windows Server 2003)

Hello:

I wasn't able to find any info on the registry-based configuration changes
mentioned in the article below. They sure do a good job of keeping the info
hidden! I'm trying to find out how to increase the audit log period, if
possible. By default, DHCP audit logs are kept on a seven-day rotation only.

From http://technet.microsoft.com/en-us/l...1(WS.10).aspx:

Other audit logging parameters described above are adjusted through
registry-based configuration changes. For more information about the Windows
Server 2003 DHCP server registry, see "Dynamic Host Configuration Protocol"
at the Microsoft Windows Resource Kits Web site.


--
Thank you,
Mel K.
MCSA: M

"Mel K." <(E-Mail Removed)> wrote in
news:uXX#(E-Mail Removed):

> (Windows Server 2003)
>
> Hello:
>
> I wasn't able to find any info on the registry-based configuration
> changes mentioned in the article below. They sure do a good job of
> keeping the info hidden! I'm trying to find out how to increase the
> audit log period, if possible. By default, DHCP audit logs are kept on
> a seven-day rotation only.
>
> From http://technet.microsoft.com/en-us/l...1(WS.10).aspx:
>
> Other audit logging parameters described above are adjusted through
> registry-based configuration changes. For more information about the
> Windows Server 2003 DHCP server registry, see "Dynamic Host
> Configuration Protocol" at the Microsoft Windows Resource Kits Web
> site.
>
>

Dynamic Host Configuration Protocol (DHCP) servers include several logging
features and server parameters that provide enhanced auditing capabilities.
You can specify the following features:

-- The file path in which the DHCP server stores audit log files. DHCP
audit logs are located by default at %windir%\System32\Dhcp.
-- A maximum size restriction (in megabytes) for the total amount of disk
space available for all audit log files created and stored by the DHCP
service.
-- An interval for disk checking that is used to determine how many times
the DHCP server writes audit log events to the log file before checking for
available disk space on the server.
-- A minimum size requirement (in megabytes) for server disk space that is
used during disk checking to determine if sufficient space exists for the
server to continue audit logging.

Registry path for these settings:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\DHCPServer\Parameters

Caution: Incorrectly editing the registry might severely damage your
system. Before making changes to the registry, you should back up any
valued data.

HTH...

James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.

James:

Thanks for the info. MS needs to provide more info in that article or
provide a specific link instead of referring to a general area. Anyway, I
found more info on the registry changes here:
http://blogs.msdn.com/anto_rocks/arc...-auditing.aspx.

--
Thank you,
Mel K.
MCSA: M
"James McIllece [MS]" <(E-Mail Removed)> wrote in message
news:Xns9C4F76504737Djamesmcimsftcorp@207.46.248.1 6...
> "Mel K." <(E-Mail Removed)> wrote in
> news:uXX#(E-Mail Removed):
>
>> (Windows Server 2003)
>>
>> Hello:
>>
>> I wasn't able to find any info on the registry-based configuration
>> changes mentioned in the article below. They sure do a good job of
>> keeping the info hidden! I'm trying to find out how to increase the
>> audit log period, if possible. By default, DHCP audit logs are kept on
>> a seven-day rotation only.
>>
>> From http://technet.microsoft.com/en-us/l...1(WS.10).aspx:
>>
>> Other audit logging parameters described above are adjusted through
>> registry-based configuration changes. For more information about the
>> Windows Server 2003 DHCP server registry, see "Dynamic Host
>> Configuration Protocol" at the Microsoft Windows Resource Kits Web
>> site.
>>
>>
>
> Dynamic Host Configuration Protocol (DHCP) servers include several logging
> features and server parameters that provide enhanced auditing
> capabilities.
> You can specify the following features:
>
> -- The file path in which the DHCP server stores audit log files. DHCP
> audit logs are located by default at %windir%\System32\Dhcp.
> -- A maximum size restriction (in megabytes) for the total amount of disk
> space available for all audit log files created and stored by the DHCP
> service.
> -- An interval for disk checking that is used to determine how many times
> the DHCP server writes audit log events to the log file before checking
> for
> available disk space on the server.
> -- A minimum size requirement (in megabytes) for server disk space that is
> used during disk checking to determine if sufficient space exists for the
> server to continue audit logging.
>
> Registry path for these settings:
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\DHCPServer\Parameters
>
> Caution: Incorrectly editing the registry might severely damage your
> system. Before making changes to the registry, you should back up any
> valued data.
>
> HTH...
>
> James McIllece, Microsoft
>
> Please do not send email directly to this alias. This is my online
> account
> name for newsgroup participation only.
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>

"Mel K." <(E-Mail Removed)> wrote in
news:OC#(E-Mail Removed):

> James:
>
> Thanks for the info. MS needs to provide more info in that article or
> provide a specific link instead of referring to a general area.
> Anyway, I found more info on the registry changes here:
> http://blogs.msdn.com/anto_rocks/arc...bout-dhcp-audi
> ting.aspx.
>

You're welcome, glad you found the info you need.

Also, if you have time, the author of the article will probably update it
if you provide feedback on the article and tell them what information is
missing that would improve the article. (This is assuming that the page has
feedback enabled.)

The writing teams at MS appreciate customer feedback like that and almost
always close the loop by updating articles when provided with good
suggestions like yours.

James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.