Why isn't my DHCP Scope issuing leases anymore?

This is a wierd one.  We have a Windows 2003 Server that we move the DHCP scope off of back in March 2008.  Everything has been running fine until last week.  All of a sudden the server stopped renewing IP Addresses.

There are a few dhcp errors inside the event log, pointing to the permissions that the scope runs under but I can't remember the exact error message.  I did what MS told me to do and it didn't resolve the issue.

I also saw an error in the event log that pointed to a Jet -1032 error; but that didn't yield any positive results either.
I followed MS's approach to restore the DHCP database which didn't help and I also totally deleted the DHCP scope and recreated it; which didn't help either.

Some of my users can get a DHCP address but the majority cannot; which makes little sense to me.  I have turned the DHCP on the old server scope back on and there isn't a conflict; which there should be since it is the same scope with the same exceptions, and it is issuing DHCP addresses without issue.

What am I missing?  I have checked the permissions and they are h set to the same settings.  As I said earlier, it was working fine for 3 months then all of a sudden it started having issues.

We have the lease set to expire after 8 days.

Any help is appreciated.
Who is Participating?
Rob WilliamsConnect With a Mentor Commented:
A rogue DHCP server is another unauthorized DHCP server. Could be malicious or just something like a router with DHCP enabled.
I have also seen employees add home routers, usually wireless) to a network and install them backward by mistake such that they are offering DHCP leases to your network.
Rob WilliamsCommented:
>>"There are a few dhcp errors inside the event log, pointing to the permissions that the scope runs under but I can't remember the exact error message"
That would be useful information to have.

In the DHCP management console if you expand the server name, there should be a green dot on the server name. Is there? If not is it blue, yellow, red, and what icon is it?

-Have credentials been set and is it a current user name and password? [ right lick on scope name | properties | advanced | credentials]
-Have you authorized the scope? [Right click on the server name it should show unauthorize if authorized]
-Is DHCP bound to the correct adapter? [ right lick on scope name | properties | advanced | bindings]
roadnrailAuthor Commented:

Thanks for your reply and here's what I got.
In the management console the is a Green Arrow pointing UP beside the scope and the scope is **ACTIVE** when I click on the scope name.

The error message is below since it is huge.  I didn't think about it, but I clicked on the "more help" in the event log and it actually took me somewhere.

Yes, the credentials are set with an active Username and Password (using the administrator account), but I reset the password just in case.
The Scope has been authorized (see Unauthorize when I right click)
There is only 1 adapter showing up in the bindings area and it is checked.

DHCPServer Error Code: 1014
Product: Windows Operating System
ID: 1014
Source: DhcpServer
Version: 5.2
Message: The following problem occurred with the Jet database %1: Jet database read or write operations failed. If the computer or database has just been upgraded, then this message can be safely ignored. If this message appears frequently, either there is not enough disk space to complete the operation or the database or backup database may be corrupt. To correct this problem, either free additional space on your hard disk or restore the database. After you restore the database, ensure that conflict detection is enabled in DHCP server properties. For information about restoring the database, see Help and Support Center. Additional Debug Information: %2.

We have 153 GB's on that partition and 750 GB's on the D partition so I know it's not the Hard drive space running low.  Don't think you can run dskchk on a SCSI array, but never tried it so I don't know for sure and lastly, the DB is only 5 MB's in size.

Thanks for the help and the wierd thing is that it was working for 3 months then just stopped.  That's what I would like to know; WHY?  

The only thing installed on that machine in the last 3 months has been MS updates and and 2 accounting package that uses port 10000 and port 9999 to communicate on and the MS updates.

All have been working fine for the last 3 months until last week when the leases stopped getting renewed.

Thanks again for the help and hope to hear from you soon.
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Rob WilliamsCommented:
Sounds more like corruption than a space issue. I have seen that with some anti-virus programs, but have you seen the following list from EventID.net?  They have several good links relating to this problem. Perhaps review those if you haven't already.
roadnrailAuthor Commented:
Lookng into these items now.  I tried restoring the databae from a backup and it didn't work.

Tried excluding the folder yesterday afternoon from my Symantec EndPoint Protecton and am waiting to test it now.
roadnrailAuthor Commented:
Does anyone know what a "Rogue Service" is in the DHCP world?

50+       Codes above 50 are used for Rogue Server Detection information.
Part of the DHCP log from Monday
24,06/16/08,12:40:30,Database Cleanup Begin,,,,

However, it did assign/renew IP addresses for 5 machines, but not for 10 others.
roadnrailAuthor Commented:
Well, I have 2 DHCP servers.  the old one and the new one.  I had to turn on the old one because the new one stopped issuing leases.

They both have the same scope and range so that could be it.  But I need to make sure the uses have a valid ipaddress so they can work.
Rob WilliamsCommented:
Can you change the DHCP scopes on the two servers so they don't overlap?
roadnrailAuthor Commented:
Sure I can; but this was the first thing I tried ad it didn't resolve anything.

Also deleted the original scope (thought about possible corruption) and rebuilt it; but that didn't help either.

I'll change it to:
 New = upper 1/2 of the scope.
 Old = Lower 1/2 of the scope.
roadnrailAuthor Commented:
Well, I feel like a heal.  One of the things I found in my research after chasing my tail on this is that "Is DHCP Relay Turned On?"

It's not by default.  So we tried turning it on.  "Can't turn on DHCP Relay while the Windows Firewall is enabled."  So we disabled it and WOW imagine that, DHCP now works again.  Go figure.

Anyway, we had never had the firewall on in the first place so not really sure how it got turned on, but that was the issue.

Thanks RobWill for all your help.  I greatly appreciate you taking the time out to entertain me for a few days.
roadnrailAuthor Commented:
I found the answer myself, but am awarding you all the points since you helped in my research and pointed me toward possible solutions which a definately appreciate.

Thanks for all your efforts and hardwork to help me out.
Rob WilliamsCommented:
Thanks roadnrail. Glad to hear you were able to resolve.
Are you sure it was the Windows firewall and not the the RRAS NAT/firewall with DHCP enabled.

Cheers !
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.