Rickcee
asked on
DHCP wont authorize 'says access denied' on win 2003 server
I have recently upgraded two of our servers in different sites from Nt to 2003 server but i get the following error on them both :
When i go to Dhcp Manager and
select dhcp
and right click and select authorize
it says 'access denied'
I am loged on as administrator and i am also a member of enterpirse admins which i belive can also come up with the same error if not a memeber.
Can any one help?
Cheers
Rick
When i go to Dhcp Manager and
select dhcp
and right click and select authorize
it says 'access denied'
I am loged on as administrator and i am also a member of enterpirse admins which i belive can also come up with the same error if not a memeber.
Can any one help?
Cheers
Rick
ASKER
I get the following system erorrs
dhcp server
rdr
netlogon
server
service control manager
AMDEDIE
W32TIME
NETBT
W3SVC
And in dns server i get
dns - error
Yes there is active directory.
No i dont have another dhcp server in active directory
and no there are not any other dhcp servers
I am a bit lost with this one
dhcp server
rdr
netlogon
server
service control manager
AMDEDIE
W32TIME
NETBT
W3SVC
And in dns server i get
dns - error
Yes there is active directory.
No i dont have another dhcp server in active directory
and no there are not any other dhcp servers
I am a bit lost with this one
If this is the first server in your domain you must install it on a domain controller. But the diagnostics must be done using the exact error messages, since it seems to be related to the whole Active directory. The message and the event id could be helpful.
ASKER
The event id`s are
dhcpserver 1046
amdede 4
service control manager 7026
thanks
dhcpserver 1046
amdede 4
service control manager 7026
thanks
ASKER
it is the only server located in a primary school.
Too few details. Can't you copy and paste from event log?
ASKER
yea here you go , sorry
7/5/04 1:28:31 PM Service Control Manager Error None 7026 N/A STWILFRID "The following boot-start or system-start driver(s) failed to load:
AMDEIDE"
7/5/04 1:28:31 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM STWILFRID The Windows Internet Name Service (WINS) service was successfully sent a continue control.
7/5/04 1:27:55 PM W32Time Warning None 12 N/A STWILFRID Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
7/5/04 1:27:51 PM Application Popup Information None 26 N/A STWILFRID "Application popup: Service Control Manager : At least one service or driver failed during system startup. Use Event Viewer to examine the event log for details.
"
7/5/04 1:27:45 PM DhcpServer Error None 1046 N/A STWILFRID "The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain wilfrid.local, has determined that it is not authorized to start. It has stopped servicing clients. The following are some possible reasons for this:
This machine is part of a directory service enterprise and is not authorized in the same domain. (See help on the DHCP Service Management Tool for additional information).
This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized.
Some unexpected network error occurred."
7/5/04 1:27:42 PM Wins Information None 4097 N/A STWILFRID WINS initialized properly and is now fully operational.
7/5/04 1:27:41 PM DhcpServer Warning None 1056 N/A STWILFRID "The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service. This is not a recommended security configuration. Credentials for Dynamic DNS registrations may be configured using the command line ""netsh dhcp server set dnscredentials"" or via the DHCP Administrative tool. "
7/5/04 1:27:39 PM smtpsvc Information None 4005 N/A STWILFRID Time spent on preparing to reset routes: [0] milliseconds Time spent on recalculating next hops: [0] milliseconds Queue length : [0]
7/5/04 1:27:33 PM IPSec Information None 4294 N/A STWILFRID The IPSec driver has entered Secure mode. IPSec policies, if they have been configured, are now being applied to this computer.
7/5/04 1:27:33 PM DfsSvc Information None 14531 N/A STWILFRID DFS server has finished initializing.
7/5/04 1:27:33 PM DfsSvc Information None 14533 N/A STWILFRID DFS has finished building all namespaces.
7/5/04 1:27:32 PM BROWSER Information None 8015 N/A STWILFRID The browser has forced an election on network \Device\NetBT_Tcpip_{34632
7/5/04 1:26:59 PM Server Warning None 2511 N/A STWILFRID "The server service was unable to recreate the share EromoseleTheophilysOkoh because the directory f:\Students\EromoseleTheop
7/5/04 1:26:25 PM IPSec Information None 4295 N/A STWILFRID The IPSec Driver is starting in Bypass mode. No IPSec security is being applied while this computer starts up. IPSec policies, if they have been assigned, will be applied to this computer after the IPSec services start.
7/5/04 1:26:18 PM AMDEIDE Error None 4 N/A STWILFRID Driver detected an internal error in its data structures for .
7/5/04 1:28:31 PM Service Control Manager Error None 7026 N/A STWILFRID "The following boot-start or system-start driver(s) failed to load:
AMDEIDE"
7/5/04 1:28:31 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM STWILFRID The Windows Internet Name Service (WINS) service was successfully sent a continue control.
7/5/04 1:27:55 PM W32Time Warning None 12 N/A STWILFRID Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
7/5/04 1:27:51 PM Application Popup Information None 26 N/A STWILFRID "Application popup: Service Control Manager : At least one service or driver failed during system startup. Use Event Viewer to examine the event log for details.
"
7/5/04 1:27:45 PM DhcpServer Error None 1046 N/A STWILFRID "The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain wilfrid.local, has determined that it is not authorized to start. It has stopped servicing clients. The following are some possible reasons for this:
This machine is part of a directory service enterprise and is not authorized in the same domain. (See help on the DHCP Service Management Tool for additional information).
This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized.
Some unexpected network error occurred."
7/5/04 1:27:42 PM Wins Information None 4097 N/A STWILFRID WINS initialized properly and is now fully operational.
7/5/04 1:27:41 PM DhcpServer Warning None 1056 N/A STWILFRID "The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service. This is not a recommended security configuration. Credentials for Dynamic DNS registrations may be configured using the command line ""netsh dhcp server set dnscredentials"" or via the DHCP Administrative tool. "
7/5/04 1:27:39 PM smtpsvc Information None 4005 N/A STWILFRID Time spent on preparing to reset routes: [0] milliseconds Time spent on recalculating next hops: [0] milliseconds Queue length : [0]
7/5/04 1:27:33 PM IPSec Information None 4294 N/A STWILFRID The IPSec driver has entered Secure mode. IPSec policies, if they have been configured, are now being applied to this computer.
7/5/04 1:27:33 PM DfsSvc Information None 14531 N/A STWILFRID DFS server has finished initializing.
7/5/04 1:27:33 PM DfsSvc Information None 14533 N/A STWILFRID DFS has finished building all namespaces.
7/5/04 1:27:32 PM BROWSER Information None 8015 N/A STWILFRID The browser has forced an election on network \Device\NetBT_Tcpip_{34632
7/5/04 1:26:59 PM Server Warning None 2511 N/A STWILFRID "The server service was unable to recreate the share EromoseleTheophilysOkoh because the directory f:\Students\EromoseleTheop
7/5/04 1:26:25 PM IPSec Information None 4295 N/A STWILFRID The IPSec Driver is starting in Bypass mode. No IPSec security is being applied while this computer starts up. IPSec policies, if they have been assigned, will be applied to this computer after the IPSec services start.
7/5/04 1:26:18 PM AMDEIDE Error None 4 N/A STWILFRID Driver detected an internal error in its data structures for .
The AMDEide error is related to harware resources, some driver fail to load, probably referenced to chipset.
The server is the PDC Emulator. What is it's address? The address must be fixed, and in the same network as the dhcp server, but not in the scope.
The server is the PDC Emulator. What is it's address? The address must be fixed, and in the same network as the dhcp server, but not in the scope.
ASKER
its 192.168.1.2
And the scope?
ASKER
the scope is 192.168.1.0
the address range for distribution is 192.168.1.5 to 192.168.1.205
the address range for distribution is 192.168.1.5 to 192.168.1.205
ASKER
this is the scrren shot of the error i get when i try and autorize
http://server6.uploadit.org/files/rickcee-screenshot1.JPG
http://server6.uploadit.org/files/rickcee-screenshot1.JPG
There is some help here on microsoft:
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_DHCP_tro_AnalyzingSrvLogs.asp
Maybe you'll need to enable audit on dhcp server.
Is the dns working?
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_DHCP_tro_AnalyzingSrvLogs.asp
Maybe you'll need to enable audit on dhcp server.
Is the dns working?
ASKER
yes it is
Then the account you've used to logon is not a member of the enterprise Admin.
ASKER
it is
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
i was thinking that. Thanks for your time :)
ASKER
did that but still wont authorize?
I'm afraid you don't have a fsmo role in the domain where the dhcp server must be authorized. Verify the fsmo roles.
You must be a member of the Enterprise Admin group to authorize your DHCP services,
http://channels.lockergnome.com/windows/archives/20041126_access_denied_when_authorizing_a_dhcp_server.phtml
http://channels.lockergnome.com/windows/archives/20041126_access_denied_when_authorizing_a_dhcp_server.phtml
ASKER
i removed active directory and reinstalled and it all works now
thanks for your help guys ;)
thanks for your help guys ;)
Is there active directory?
Do you have another dhcp server in Active directory?
Do you have other Windows NT servers with dhcp service installed and running?