I am trying to find out where I would see any MAC address that is blocked when the Deny Filter is enabled and MAC addresses are added. I have looked in the Microsoft DHCP Service Activity Log (DhcpSrvLog-%day%) and see Event ID's 15 (A lease was denied) and 33 (Packet dropped due to NAP policy). Am I looking in the right place for such things and if so, would it be Event ID 15 or 33 or another?
Thanks in advance.