DHCP and rogue server detection

[Adam]

Our DHCP server recently stopped assigning IP addresses
to our remote offices connected through a VPN tunnel. The
remote offices use netscreen firewalls with the DHCP
relay agent applied. This process used to work without a
problem. I installed w2k sp4 on the DHCP server about
three weeks ago. This server also runs the WINS and DNS
services for our windows NT domain. I don't see any
errors in the event viewer. I do however see unfamiliar
entries in the DHCP log. The event ID is 60 and it
reads "no DC is DS enabled" I would really like to know
what this means. The event ID of 60 is what lead me to
subject line of this message. Any thoughts or ideas are
appreciated.

Adam Tormey CCNA, MCSA

 

[Shane Brasher]

Hello Adam,

Basically as per:

http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows
2000/en/server/help/sag_DHCP_tro_AnalyzingSrvLogs.htm

"No Windows 2000 domain controller (DC) was located. For detecting whether
the server is authorized, a DC that is enabled for Active Directory is
needed."

Technet
For the directory authorization process to work properly, it is necessary
that the first Windows 2000 DHCP server introduced onto your network
participate in the Active Directory service. This requires that the server
be installed in a domain (as either a domain controller or a member
server), and not in a workgroup. When you are either planning for or
actively deploying Active Directory services, do not elect to install your
first DHCP server as a workgroup server. You must have enterprise
administrator rights to authorize a DHCP server in the Active Directory.

If you deploy Active Directory, all computers operating as DHCP servers
must be either domain controllers or domain member servers before they can
be authorized in
the directory service or start providing DHCP service to clients. When a
DHCP server is authorized, the server computer is added to the list of
authorized DHCP servers maintained in the directory service database.

Suggested Troubleshooting
*********************************
Make sure the DHCP server is authorized.
If the server is authorized, make sure that there is an availible DC to
verify the authorization.
If the server is NOT part of a AD domain, then the below may apply:

299363 An Event ID 1051 Message May Be Displayed After You Install Service
Pack
http://support.microsoft.com/?id=299363


Shane Brasher
MCSE (2003,2000,NT),MCSA Security, Network+, A+
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.