We help IT Professionals succeed at work.

Cannot Authorise DHCP server on a Child DC

alex_harl
alex_harl asked
on
1,275 Views
Last Modified: 2008-05-31
I cannot authorise a DHCP server on a Windows 2003 server that's a DC for a Child Domain. Dcpromo did not return any errors. I am logged in as Enterprise Administrator.
After Authorising ADSIedit shows a new entry for this server in CN=Services, CN=NetServices but the DHCP server remains anauthorized with a DhcpServer error: "The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons for this:.."
Comment
Watch Question

Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
The problem is with replication, 'Replicate now' from the Child DCs NTDS object brings up an error "The following error occurred during the attempt to contact domain controller: RPC server is unavailable".
Dcdiag output on child DC passes all checks, netdiag has several errors - Redir and Browser test : Failed
[FATAL] Cannot send mailslot message to '\\domain*\MAILSLOT\NET\NETLOGON' via redir. [ERROR_BAD_NETPATH], and
DC list test: Failed Failed to enumerate DCs by using the browser [ERROR_NO_BROWSER_SERVERS_FOUND]
Replmon on forest root DC shows successful replication attempts in both directions.
My first thought was DNS - child DC points to itself in NIC properties and has parent doamin DNS servers as forwarders.
Let's start with the simple/big wins -

1. Restart the DNS servers in the child domain
2. Flush the DNS cache on the DCs in the child domain
   - run a shell
   - type      ipconfig /flushdns
3. Verify the forwarders are functioning
4. Verify the DNS zones on the root DCs are populated as you'd expect

Author

Commented:
Hi, DHCP server is now authorised but the time stamp for the event is much earlier then restarting the DNS server and flushing DNS. Not to confuse matters - let's leave DHCP for a second and look at the replication
(I did get the DHCP server to authorize and it remained active for a few days, I would have made numerous changes since it stopped working so one of those could have caused it to start again - better look at the other problems, if that's OK).

Following your steps, forwarders are functioning OK,  the DNS zone for child.domain.com on root DCs has A records - servername and same as parent folder for the child DC, and as far as I can see correct fqdn SRV records for the child DC. Attempting to replicate still causes the RPC locator unavailable. Netdiag output has the same errors.
On the child DC, run a command shell and enter -

ipconfig /flushdns

... look for entries that state 'name not found' or the like and paste the corresponding RR back here.
Minor correction ... I erased one ofthe steps.  After you've flushed the resolver cache (/flushdns), use Sites and Services and force replication ... then follow the last instruction.

Author

Commented:
Apologies - the RPC Locator message was an error on my part - I mistakenly used NTDS object for a different site that is genuienly unavailable. There aren't any 'name not found' in DNS.

I'd say the reason for the DHCP problem was as you suggested replication latency, I would have then made changes to DNS without flushing the cache. So your seccond suggestion was also right.

I can force replication in both directions. As my DHCP problem is fixed I will assign the points, just to check if you have any suggestions re DC list and netdiag errors.
No browsers found is kinda moot since it's referring to a legacy service, that said though, it's not something I recollect seeing on a regular basis.  As for your other repl. issue, what's causing that?

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.