How to see the last time an IP reservation was used in DHCP console server 2008?

Question

_{Friday, December 2, 2011 8:37 PM}

All of our IP address assignments / reservations are typed in at the console so every computer gets the same IP every time.  Is there a way to tell the last time a reservation was used or if it's in use currently?  We have converted  from a Novell DHCP to Microsoft DHCP and we really depend on this feature for maintaining IP assignments.

All replies (10)

_{Friday, December 2, 2011 8:48 PM}

Have you checked the logfiles?  %systemroot%\system32\dhcpGuides and tutorials, visit ITGeared.com.

_{Friday, December 2, 2011 8:56 PM}

I'm a DHCP admin only I don't have access to the server itself.  I could request access though.  Is the log file difficult to read?

_{Sunday, December 4, 2011 4:46 PM}

its a simple text file.

Guides and tutorials, visit ITGeared.com.

_{Sunday, December 4, 2011 7:39 PM}

In Windows Server 2003 family, DHCP server log files are designed to use Audit logging to permit log files to remain enabled for use without requiring added monitoring or administering to manage log file growth or conserve disk resources. DHCP audit logs are located by default at %windir%\System32\Dhcp.

Analyzing DHCP logfiles:

http://technet.microsoft.com/en-us/library/cc776384(WS.10).aspx

MCTS...

_{Monday, December 5, 2011 9:11 AM | 1 vote}

Hi,

Thanks for posting here.

> Is there a way to tell the last time a reservation was used or if it's in use currently? 

Verifying DHCP log is the way we can achieve the goal. Log files will be stored under the path “%windir%\System32\Dhcp” by default.

And you may take look the utility below which might help to do it easier:

http://blogs.technet.com/b/teamdhcp/archive/2009/03/20/tool-to-read-dhcp-server-events-for-windows-server-2008-r2.aspx

Thanks.

Tiger Li

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

_{Monday, December 5, 2011 3:25 PM}

After installing the snapin and attempting to add servers I get an error "ERROR Loading Filter Notification: The RPC server is unavailable" and  "ERROR Loading System Logs: The RPC server is unavailable" 

Is this a program error or rights issue?

_{Monday, December 5, 2011 4:24 PM}

I requested an admin send me a log and the file I received was called "DhcpSrvLog-Fri.log".  It contained event ID code explanations up to 50 but no actual information.  Did the wrong file get sent to me?

_{Monday, December 5, 2011 5:10 PM}

 

 

Hi,

 

Thanks for posting here.

 

> Is there a way to tell the last time a reservation was used or if it's in use currently? 

 

Verifying DHCP log is the way we can achieve the goal. Log files will be stored under the path “%windir%\System32\Dhcp” by default.

And you may take look the utility below which might help to do it easier:

 

http://blogs.technet.com/b/teamdhcp/archive/2009/03/20/tool-to-read-dhcp-server-events-for-windows-server-2008-r2.aspx

 

Thanks.

 

Tiger Li

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I was able to add a dhcp server.  Which log drop down should have in the information I am looking for MACfilter, Activity or System?

_{Wednesday, December 7, 2011 6:22 AM}

Hi,

Thanks for update.

I might made a mistake since we are running Windows Server 2008 but not R2 so this utility will not work in this environment .

Meanwhile, script in the links below might will help us better to do the analyze:

Parse the DHCP Audit Log

http://gallery.technet.microsoft.com/scriptcenter/1023b90b-3569-4f3d-8b6c-985bee4e773f

Read a Comma Separated Values Log

http://gallery.technet.microsoft.com/scriptcenter/25376f21-1fd3-4bce-b905-ce7012173317

Thanks.

Tiger Li

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

_{Wednesday, December 7, 2011 3:20 PM}

 

 

Hi,

 

Thanks for update.

 

I might made a mistake since we are running Windows Server 2008 but not R2 so this utility will not work in this environment .

Meanwhile, script in the links below might will help us better to do the analyze:

 

Parse the DHCP Audit Log

http://gallery.technet.microsoft.com/scriptcenter/1023b90b-3569-4f3d-8b6c-985bee4e773f

 

Read a Comma Separated Values Log

http://gallery.technet.microsoft.com/scriptcenter/25376f21-1fd3-4bce-b905-ce7012173317

 

Thanks.

 

Tiger Li

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I was sent 3 log files ( 3 different days) none of them have IP addresses listed, just the instructions on how to read the file.