DHCP Authorization in windows server 2008

[cammy]

Hi

I am having a nightmare trying to get dhcp working in a new windows 2008 server. The dhcp status never changes to green although the server is listed as authorized when looking at "Manage Authorised Servers" and also in ADSIEDIT in the usual place.

The event log is showing DHCP 1059 and 1046 errors as follows:

1059 - The directory service failed to see a directory server for authorisation

1046 - The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain ourdomain.com, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons for this: 

This machine is part of a directory service enterprise and is not authorized in the same domain.  (See help on the DHCP Service  Management 
Tool for additional information). 

This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized. 

Some unexpected network error occurred.

This is not followed with the DHCP event 1044 that I would like to see.

Our setup is as follows, I hope nothing glaringly obviously wrong here:

Network: 10.0.0.0/16
DNS1: 10.0.0.8
DNS2: 10.0.0.3
DHCP: 10.0.0.8
Scope: 10.0.10.1 - 10.0.10.200
DC: 10.0.0.3

There are no apparent network connectivity issues. Everything can ping everything by name and ip. There are no rogue dhcp servers.

The DNS servers are both configured with themselves as secondary in the network settings.

I ran wireshark on the DHCP server and dhcp requests were getting through but were never acknowledged.

AD was taken from our existing 2003 server environment and restored to the new 2008 servers. We have essentially got one new server with the same name for each of the old ones. I thought it may be an issue with the SID of the old dhcp server in AD so I deleted and recreated the computer account. I have also tried reinstalling DHCP and recreating the scope by deleting the existing dhcp.mdb.

Any help would be welcome.

Cheers

Cammy

 

[SimonDavies]

A silly question, did you restore AD onto a 2003 DC? If not try doing so and then if you want a native 2008 environment move all of the FSMO roles off the 2003 DC onto the 2008 DC's and remove AD from that machine, once that's done upgrade the Forest and Domain levels to 2008 and then try working with a new DHCP server.

I just have a feeling that restore AD straight onto the 2008 server here is going to be the problem.

Simon

The real world is not about exam scores, it's about ability.

 

[cammy]

Hi

Thanks for the reply. In the end we moved the DHCP and DNS roles onto a second DC and it started working normally. Not really a solution, but it made sense for us to do this anyway.

Cheers

Cammy

 

[theravager]

Did you try unauth waiting 10 minutes and then reauth the dhcp?