DHCP access Denied Error

[banalas]

I planing in place upgrade for NT to win2k3 AD in a LAB
Upgrade went well, but i have problems with my DHCP giving error access denied when i tried to Authorize it

when i try same thing on the ROOT DC dhcp works fine

i dont want clients to do dynamic updates to root dns server, i want my child DNS server get updates to its zone

root :tektips.com
child domain :tek.tektips.com

child domain dhcp is giving an error
please help

 

[GlenJohnson]

What's the exact error, so we can do a search. Access denied is kind of vague. There should me more info in your log files somewhere.

Glen A. Johnson
If you're from the Illinois, Wisconsin or Florida area, check out Tek-Tips in Chicago IL
To get the best answers to your questions, check out faq950-5848

 

[tubbaguts]

You need to be a memeber of the enterprise admin group to authorize a DHCP server regardless of AD domain (root, child etc...).

http://support.microsoft.com/default.aspx?scid=kb;en-us;303317

 

[banalas]

when i logged with enterprise admin account it will authorize but dhcp server shows red Mark

but when i logged in domain admin who is a member of enterprise admin group its gives me an error access denied

when i checked in the log it created event with following error
its only says aceess denied


Event Type: Error
Event Source: DhcpServer
Event Category: None
Event ID: 1046
Date: 6/10/05
Time: 8:55:54 AM
User: N/A
Computer: HQFSLAB
Description:
The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain bcpss.bcps.k12.md.us, has determined that it is not authorized to start. It has stopped servicing clients. The following are some possible reasons for this:
This machine is part of a directory service enterprise and is not authorized in the same domain. (See help on the DHCP Service Management Tool for additional information).

This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized.

 

[GlenJohnson]

Event ID: 1046
Source DhcpServer
Type Error
Description The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain <domain>, has determined that it is not authorized to start. It has stopped servicing clients. The following are some possible reasons for this: This machine is part of a directory service enterprise and is not authorized in the same domain. (See help on the DHCP Service Management Tool for additional information).
This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized.
Some unexpected network error occurred.

http://www.eventid.net/display.asp?eventid=1046&source=dhcpserver

Sounds like a rogue dhcp server. Anybody new join the domain lately? Maybe a laptop? Good luck.

Glen A. Johnson
If you're from the Illinois, Wisconsin or Florida area, check out Tek-Tips in Chicago IL
To get the best answers to your questions, check out faq950-5848

 

[tubbaguts]

The windows 2003 resource kit has a tool to look at your network for dhcp servers that are both authorized and unauthorized. The resource kit is a free download from MS

 

[aftertaf]

dhcploc"...

Aftertaf
________
I reserve the right to be wrong, be confused, be suffering because it is monday, or because it is nearly the weekend.