Creation of Network share File and Printer Sharing DHCP lease event collection for of the DHCP (NB-Session-In) IP address tracking ‘dhcpaudit’ audit file location (default File and Printer Sharing location for logs is (SMB-In) %windir%\system32\dhcp ) and read access on the same Read access in the domain DNS Service RPC DNS zone configuration wide DNS ACL* (for DC collection DNS Service RPC DNS servers) Endpoint Mapper OR Membership of local Administrators group on DNS server (for DNS servers not co-located with DC) Membership of Log Remote Event Log DNS zone event collection for DNS Readers’ security group Management (RPC) DNS zone monitoring Read access in the ACL Remote Event Log stored in the DNS Management CustomSD registry key Read access in the Remote Service DNS service monitoring ‘DNS Server’ service ACL Management (RPC) Remote Service Management Membership of Log Remote Event Log Logon event collection for IP Readers’ security group Management (RPC) address tracking DC/NPS Remote Event Log Management Membership of Log N/A IPAM configuration event IPAM ‘Event Readers’ security group monitoring server) Note: Note:
Creation of Network share ‘dhcpaudit’ of the DHCP audit file location (default location for logs is and read access on the same File and Printer Sharing (NB-Session-In) File and Printer Sharing (SMB-In) DHCP lease event collection for IP address tracking DNS Read access in the domain wide DNS ACL* (for DC DNS servers) OR Membership of local Administrators group on DNS server (for DNS servers not co-located with DC) DNS Service RPC DNS Service RPC Endpoint Mapper DNS zone configuration collection Membership of Log Readers’ security group Read access in the ACL stored in the DNS CustomSD registry key Remote Event Log Management (RPC) Remote Event Log Management DNS zone event collection for DNS zone monitoring Read access in the ‘DNS Server’ service ACL Remote Service Management (RPC) Remote Service Management DNS service monitoring DC/NPS Membership of Log Readers’ security group Remote Event Log Management (RPC) Remote Event Log Management Logon event collection for IP address tracking IPAM server) Membership of ‘Event Log Readers’ security group N/A IPAM configuration event monitoring Note: Note: %windir%\system32\dhcp )
Understand%20and%20Troubleshoot%20IP%20Address%20Management%20(IPAM)%20in%20Windows%20Server%208%20Beta.docx