Hello
recently I'm getting an error message in the event viewer of my workstation all the time
Here it is
"The IP address lease 0.0.0.0 for the Network Card with network address 0008742FC4BE has been denied by the DHCP server 192.168.10.1 (The DHCP Server sent a DHCPNACK message).

Could someone help me find out what causes this error
Thanks in advance
Julien.

Is that station fully patched? Is it set to obtain an IP and DNS
automatically from your DHCP-server?

--
Regards,

Marina
Microsoft SBS-MVP

"Julien" <(E-Mail Removed)> schreef in bericht
news:C4B0C632-34F9-4BB4-A578-(E-Mail Removed)...
> Hello,
> recently I'm getting an error message in the event viewer of my
workstation all the time.
> Here it is:
> "The IP address lease 0.0.0.0 for the Network Card with network address
0008742FC4BE has been denied by the DHCP server 192.168.10.1 (The DHCP
Server sent a DHCPNACK message). "
>
> Could someone help me find out what causes this error?
> Thanks in advance,
> Julien.

Yes this machine is configured to get an IP and the DNS automatically from my DHCP server as evry other machine on the same subnet
It is also up-to-date
What is quite weird, it's that this machine gets from the DHCP server 3 IP addresses of DNS servers, but then after a couple of days I noticed that the 1st DNS server IP address, which actually corresponds to our internal DNS server, is missing when checking the configurations via "ipconfig"
I don't understand what happens on this machine..
If someone can help
Thanks in advance
Julien.

i thought about 1 thing
My DHCP server is configured such that the lease lasts only 8 hours, meaning that every day most of the machines on the subnet have to request a new IP address to the DHCP server
Could the previous error message be due to the fact that when a machine request a new IP address to the DHCP server, it has to do it using the IP address 0.0.0.0

This would mean this error (cf my 1st message) is more a notice than an error in reality
Thanks in advance for those who would be able to answer my question
Julien

PS:But what I still find weird is that it is said in the Event Viewer Error Message that the DHCP server has got the following address: 192168.10.
in reality this is the router!
And I don't think there is any DHCP service running on it

Hello All,

It is possible that the router is performing some sort of DHCP function.
If this is a AD domain with the MS DHCP server authorized, look in the
DHCP logs for the days that you have this problem and see if you can find
anything with code 50 and above. If you do, look at the IP address for the
rogue DHCP server.

Additional Resources
***************************

298367 How to Monitor the DHCP Log File
http://support.microsoft.com/?id=298367

Shane Brasher
MCSE (2003,2000,NT),MCSA Security, N+, A+
Microsoft Platforms Support
Windows NT/2000 Networking

What have you set in options 003, 006 and 015 in DHCP-server, Scope options?
How many nics in the server? Does DNS on your servernic(s) *only* point to
the server-IP?
Do you have W9x/ME/NT4 clients?

--
Regards,

Marina
[SBS-MVP]


"Julien" <(E-Mail Removed)> schreef in bericht
news:69593CD8-A680-457E-AACD-(E-Mail Removed)...
> i thought about 1 thing!
> My DHCP server is configured such that the lease lasts only 8 hours,
meaning that every day most of the machines on the subnet have to request a
new IP address to the DHCP server.
> Could the previous error message be due to the fact that when a machine
request a new IP address to the DHCP server, it has to do it using the IP
address 0.0.0.0 ?
>
> This would mean this error (cf my 1st message) is more a notice than an
error in reality?
> Thanks in advance for those who would be able to answer my question.
> Julien.
>
> PS:But what I still find weird is that it is said in the Event Viewer
Error Message that the DHCP server has got the following address:
192168.10.1
> in reality this is the router!
> And I don't think there is any DHCP service running on it!
>

Maybe OT, but 8 hours isn't very long. I usually use 3 days by default.

Are you using autosense on any NICs/switch ports? I wouldn't - lock
everything down at a specific speed/duplex setting.

Julien wrote:
> i thought about 1 thing!
> My DHCP server is configured such that the lease lasts only 8 hours,
> meaning that every day most of the machines on the subnet have to
> request a new IP address to the DHCP server. Could the previous error
> message be due to the fact that when a machine request a new IP
> address to the DHCP server, it has to do it using the IP address
> 0.0.0.0 ?
>
> This would mean this error (cf my 1st message) is more a notice than
> an error in reality? Thanks in advance for those who would be able to
> answer my question. Julien.
>
> PS:But what I still find weird is that it is said in the Event Viewer
> Error Message that the DHCP server has got the following address:
> 192168.10.1 in reality this is the router! And I don't think there is
> any DHCP service running on it!