Hello,
I manage a mid-sized school district network in which it is necessary to
carefully filter web content and occasionally perform forensic analyses of
computers whose users have abused acceptable use policies.
It has been suggested to us by forensics experts that we would enhance our
ability to prevail in litigation if we modified our DHCP lease duration from
its present 8 days to 365 days.
Here is what I am told:
"In order for a DHCP address to be considered static, the lease time needs
to be at least one year.
With anything less than a static IP address, and any time period less than
one year, your testimony about activity on a certain computer will be
considered uncertain."
We have a large pool of available addresses. What would be the downside
risks of changing the lease duration to 365 days?
|