Jim.....all I can say is thanks!!! You're right about the registry key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameters] "DisableRogueDetection"=dword:00000001 The log stays clean now. I think this is a typicall case for the FAQ on www.isaserver.org Greetings, Leo