I am in the middle of a Shoretel VOIP implementation. The VOIP phones pull a DHCP address from the main VLAN and then based on the custom scope options (designation of layer2 and designation of VLAN) the phone reboots and requests an address on the Voice VLAN. If the DHCP server is a member of the Windows 2000 AD domain, the phone receives only the initial DHCP address. If the DHCP server is NOT a member of the domain, the phone is able to complete the process of getting an ip on the Voice VLAN. Does anyone know of a security setting in AD that might be causing the custom scope options to be dropped?