DNS Server value keeps changing!!

We have had some problems on our network since yesterday (although nothing has changed). Users have been having problems accessing mail and application servers.
When an IPCONFIG /ALL is done it looks fine and the DNS Servers are listed as and which is correct. When the problem occurs the IPCONFIG /ALL still looks fine but the DNS server IP changes to which is not in our IP range.
I have checke the domain controllers etc., but cant find any reason why this is happening.
Can anyone help before I go insane??
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

omarfaridConnect With a Mentor Commented:
Is there a chance that you have a DHCP server on the network with the same IP address?

Try to disconnect the DHCP server for 1 or 2 min and ping the IP address and see if you get reply!

Is this problem is particular to a specific computer or it is with all?

By any means, do you have the scope mis configured on DHCP server?
Looks like that you have another DHCP server on the network like adapter connecting you to internet.

goldsmithwilliamsAuthor Commented:
That could be possible. Is there any way of tracing it?
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Try to see what is the MAC address of


arp -a

This will give you idea of the MAC address which is mostly the adapter MAC address.
The next time the problem occurs, do another IPCONFIG /ALL and note what address is shown as the DHCP server.  If it's different from your normal DHCP server, that's your culprit.  Track down that machine and shut off its DHCP service.
goldsmithwilliamsAuthor Commented:
When the problem occurs the DHCP server is correct but the DNS server is wrong, thats what I can understand. This is an example:

Physical Address: 00-19-DB-32-F9-31
Dhcp Enabled: Yes
Autoconfiguration Enables: Yes
IP Address:
Subnet Mask:
Default Gateway:
DHCP Server:
DNS Servers: (should be
Primary WINS Server:
Secondary WINS Server:
Lease Obtained: 8th February 2008 13:29:37
Lease Expires: 12th February 2008 13:29:37

An IP Config /Release then /Flushdns then /Renew puts it right then after a while it goes back to
goldsmithwilliamsAuthor Commented:
This is a problem across the network at the moment.
Can you clarify what you mean by mis configured on the DHCP server?
goldsmithwilliamsAuthor Commented:
I shut the DHCP server down and pinged it. There is no other device on the network with the same IP as when it shutdown the DHCP ping timed out.
The thing I did notice that was on the DHCP server the DNS IP is
Is your DHCP server run as DNS server as well?

Do you have multiple scopes set on the same DHCP server?
goldsmithwilliamsAuthor Commented:
Yes the DNS server is run on the DHCP and I think it has multiple scopes. There is also another DNS server on another domain controller but it doesnt have DHCP.
The strange thing is that the problem only occurred over the last few days and nothing has changed!
DrDave242Connect With a Mentor Commented:
Open the DHCP console on that server and check the properties of all scopes listed to see if one of them is giving out the address as a DNS server.  If you can verify that it's not listed in the scope options of any of them, check the server options (also in the DHCP console) for the same thing.
goldsmithwilliamsAuthor Commented:
Thanks for your help. The end result was a port plugged into a VLAN which was on a 192.168.1.x network address.
All Courses

From novice to tech pro — start learning today.