I have a windows server 2008 R2 standard running our DHCP server. I found out on a specific date that someone downloaded a pirated Movie and in searching the firewall logs I have found the local IP address it came from but I'm having a hard time finding what machine that IP address was on at the time. Is there a way in the DHCP server to find who had an IP address a couple days ago?
C:\Windows\System32\dhcp
.