DCs and DHCP

[Mark N.]

My DHCP service is very happy now, running on a Windows 2003 server in my
AD. Just for fun (and because I don't yet have many servers to promote, I
promoted this server. Well, I ran into a new issue with security and DHCP.
The server was not particularly happy being a DC and running DHCP. Why is
this? I mentioned configuring dynamic DNS...

Ah... I love active directory... ;-P

Cheers,
Mark

 

[Lanwench [MVP - Exchange]]

What sorts of issues? I run DHCP server on DCs all the time....

 

[Mark N.]

What sorts of issues? I run DHCP server on DCs all the time....

It could be related to some initial issues that I had getting DHCP to run at
all - I don't know for certain. I think that now that I have that service
running smoothly, I will promote that server again after hours today and see
what happens and report back.....

 

[Lanwench [MVP - Exchange]]

Yes - post any error messages you get, incl. event log errors...

 

[Mark N.]

Yes - post any error messages you get, incl. event log errors...

Well, taking advantage of the lunch lull, I ran DCPROMO without any
problems. My DHCP service is fine. I suspect that some earlier issues I
had with DHCP and the enterprise admins account were to blame.

Thanks,
Mark

 

[Herb Martin]

DHCP running on a Dynamic DNS "secure" (a DC of course)
server was an issue in Win2000.

Perhaps this is related to that problem/feature.

Consider adding a "DHCP users account" and then adding
this to the configuration of the DHCP's "DNS dynamic updates"
tab. (spelling or name might be slightly different.)

 

[Mark N.]

DHCP running on a Dynamic DNS "secure" (a DC of course)

server was an issue in Win2000.

Perhaps this is related to that problem/feature.

Consider adding a "DHCP users account" and then adding
this to the configuration of the DHCP's "DNS dynamic updates"
tab. (spelling or name might be slightly different.)

Hmmm... This is a 2003 server... It seems to be okay now that I authorized
DHCP. Do you think the extra users account still matters?

Thanks,
Mark

 

[Herb Martin]

If you are running DHCP on a secure AD-integrated DNS
server and using the DHCP server for updating DNS, then
you SHOULD use the extra account and settings in the
DHCP console to match.

 

[Mark N.]

If you are running DHCP on a secure AD-integrated DNS

server and using the DHCP server for updating DNS, then
you SHOULD use the extra account and settings in the
DHCP console to match.

<<sigh>>
I was afraid you'd say that ;-)

Thanks for the advice!
Mark