I can't unauthorized dhcp error popup said "paremeter incorrect" more...

Hi EE:
this is urgent!
all of the sudden, the dhcp from sbs2003 box can't assigned any IP to all workstations!
all workstation now show IP conflict (with traingle marked) with "limited and or no connection"
Server internet working but all stations have no internet (not the most important - but still need assign IP)

we need our network to perform even without internet
when I tried to unauthorized DHCP I got an error message popup said "the parameter is incorrect"
so I tried to "stop" and "start" both dhcp and dns but still OUT OF LUCK!

need help ASAP
please reply
thanks!
Sam
samntlamAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Toni UranjekConsultant/TrainerCommented:
Hi!

First question is why would you want to unathorize DHCP? DHCP on SBS is authorized by script that is why it returns an error if you try to unathorize it manually. If you close the DHCP Service snap-in, stop and restart the server that is running the DHCP service, and then reopen the DHCP Service snap-in, the service should appear as unauthorized.
Second question is what has happened to your DHCP that it stopped handing out IPs? Can you post more information?

Toni
samntlamAuthor Commented:
Maybe my question hasn't been cleared
All of sudden, Workstations IP with traingle signed and limited connection or no connection!
that was why. (Hope this answered your question)
---
and to be honest, I really didn't have a clue why out of the blue all workstations now with NO internal IP addresses and all shown conflict!
----
what kind of information you need?
there was no error message in the event logs
everything was working properly

Sam
Toni UranjekConsultant/TrainerCommented:
Is DHCP server service running on your SBS?
Is DHCP server authorized?
Is scope defined and active?

If all answers are yes clients don't get their IP addresses, open today's DHCP log file in %systemroot%\system32\dhcp.

Does it show any activity, are requests being denied?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

samntlamAuthor Commented:
1) Yes
2) Yes
3) Yes

i copied and pasted the latest log here (12:00AM)
Microsoft DHCP Service Activity Log


Event ID  Meaning
00        The log was started.
01        The log was stopped.
02        The log was temporarily paused due to low disk space.
10        A new IP address was leased to a client.
11        A lease was renewed by a client.
12        A lease was released by a client.
13        An IP address was found to be in use on the network.
14        A lease request could not be satisfied because the scope's
          address pool was exhausted.
15        A lease was denied.
16        A lease was deleted.
17        A lease was expired.
20        A BOOTP address was leased to a client.
21        A dynamic BOOTP address was leased to a client.
22        A BOOTP request could not be satisfied because the scope's
          address pool for BOOTP was exhausted.
23        A BOOTP IP address was deleted after checking to see it was
          not in use.
24        IP address cleanup operation has began.
25        IP address cleanup statistics.
30        DNS update request to the named DNS server
31        DNS update failed
32        DNS update successful
50+       Codes above 50 are used for Rogue Server Detection information.

ID,Date,Time,Description,IP Address,Host Name,MAC Address
24,08/08/08,00:00:33,Database Cleanup Begin,,,,
25,08/08/08,00:00:33,0 leases expired and 0 leases deleted,,,,
25,08/08/08,00:00:33,0 leases expired and 0 leases deleted,,,,
NivleshCommented:
Hi.

Your dhcp server has run out free ips. Go into the scope and under the ip range, change this to a bigger range.
But before that have a look in the address leases to see if the leases are given out to genuine pcs. You might also want to reconcile the dhcp scope.

Toni UranjekConsultant/TrainerCommented:
This log is empty and it does not show any clients even requesting an IP address. Are you sure that clients traffic can reach server? Did you check your network equipment, cables, can you reach any part of your network from server?
samntlamAuthor Commented:
Nivlesh,
that could be the case and I will look into that later today and thank you!
---
Toniur,
I shutdown all workstation because of IP conflicted!
I will get back to you on the full logs of the DHCP
and also, please accept my thankful - grateful of your prompt replied on such issue!
I really appreciated
Sam
samntlamAuthor Commented:
Toniur
Basically, this is the logs (Modified of MAC - Domain name - removed)
and it's all working last night at 2:00AM by restarted this sbs2003 box!
Except 1 none client workstation (xxx.xxx.x.199) can't get any internet connection at all?!
I am just being furious and frustrated....
-------
Nivlish
the DHCP address pool has 192.168.1.1 ~ 192.168.1.254
aren't that enough to hold 20 workstations?
----
thank you for all your efforts
Sam
---------------
                     Microsoft DHCP Service Activity Log


Event ID  Meaning
00        The log was started.
01        The log was stopped.
02        The log was temporarily paused due to low disk space.
10        A new IP address was leased to a client.
11        A lease was renewed by a client.
12        A lease was released by a client.
13        An IP address was found to be in use on the network.
14        A lease request could not be satisfied because the scope's
          address pool was exhausted.
15        A lease was denied.
16        A lease was deleted.
17        A lease was expired.
20        A BOOTP address was leased to a client.
21        A dynamic BOOTP address was leased to a client.
22        A BOOTP request could not be satisfied because the scope's
          address pool for BOOTP was exhausted.
23        A BOOTP IP address was deleted after checking to see it was
          not in use.
24        IP address cleanup operation has began.
25        IP address cleanup statistics.
30        DNS update request to the named DNS server
31        DNS update failed
32        DNS update successful
50+       Codes above 50 are used for Rogue Server Detection information.

ID,Date,Time,Description,IP Address,Host Name,MAC Address
24,08/08/08,00:00:33,Database Cleanup Begin,,,,
25,08/08/08,00:00:33,0 leases expired and 0 leases deleted,,,,
25,08/08/08,00:00:33,0 leases expired and 0 leases deleted,,,,
01,08/08/08,00:40:53,Stopped,,,,
00,08/08/08,00:50:59,Started,,,,
55,08/08/08,00:51:05,Authorized(servicing),,,,
24,08/08/08,00:51:59,Database Cleanup Begin,,,,
25,08/08/08,00:51:59,0 leases expired and 0 leases deleted,,,,
25,08/08/08,00:51:59,0 leases expired and 0 leases deleted,,,,
11,08/08/08,00:54:21,Renew,192.168.1.102,xxxxxxxx.,domainname.com,
10,08/08/08,00:56:06,Assign,192.168.1.199,xxxxxxxx.,domainname.com,
11,08/08/08,00:56:08,Renew,192.168.1.199,xxxxxxxx.,domainname.com,
11,08/08/08,01:04:25,Renew,192.168.1.11,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:04:25,Renew,192.168.1.15,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:04:27,Renew,192.168.1.19,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:04:52,Renew,192.168.1.13,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:04:54,Renew,192.168.1.13,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:06:44,Renew,192.168.1.12,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:06:51,Renew,192.168.1.103,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:06:59,Renew,192.168.1.119,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:07:13,Renew,192.168.1.52,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:07:18,Renew,192.168.1.54,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:07:21,Renew,192.168.1.54,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:07:34,Renew,192.168.1.53,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:07:37,Renew,192.168.1.53,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:07:37,Renew,192.168.1.50,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:29:00,Renew,192.168.1.199,XXXXXX.domainname.com,xxxxxxxxxxxx,
30,08/08/08,01:31:03,DNS Update Request,199.1.168.192,xxxxxxxxxx.,,
12,08/08/08,01:31:03,Release,192.168.1.199,XXXXXX.domainname.com,xxxxxxxxxxxx,
32,08/08/08,01:31:03,DNS Update Successful,192.168.1.199,xxxxxxxxxx.,,
11,08/08/08,01:31:08,Renew,192.168.1.199,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,01:33:31,Renew,192.168.1.199,
11,08/08/08,01:33:35,Renew,192.168.1.199,
11,08/08/08,01:37:08,Renew,192.168.1.199,
11,08/08/08,01:37:55,Renew,192.168.1.199,
11,08/08/08,01:37:57,Renew,192.168.1.199,
11,08/08/08,01:43:59,Renew,192.168.1.199,
11,08/08/08,01:44:01,Renew,192.168.1.199,
30,08/08/08,01:44:15,DNS Update Request,199.1.168.192,
12,08/08/08,01:44:15,Release,192.168.1.199,
32,08/08/08,01:44:15,DNS Update Successful,192.168.1.199,
11,08/08/08,01:45:47,Renew,192.168.1.199,
11,08/08/08,01:45:50,Renew,192.168.1.199,
24,08/08/08,01:51:01,Database Cleanup Begin,,,,
25,08/08/08,01:51:01,0 leases expired and 0 leases deleted,,,,
25,08/08/08,01:51:01,0 leases expired and 0 leases deleted,,,,
11,08/08/08,01:53:19,Renew,192.168.1.199,
11,08/08/08,01:53:22,Renew,192.168.1.199,
24,08/08/08,02:51:06,Database Cleanup Begin,,,,
25,08/08/08,02:51:06,0 leases expired and 0 leases deleted,,,,
25,08/08/08,02:51:06,0 leases expired and 0 leases deleted,,,,
24,08/08/08,03:51:09,Database Cleanup Begin,,,,
25,08/08/08,03:51:09,0 leases expired and 0 leases deleted,,,,
25,08/08/08,03:51:09,0 leases expired and 0 leases deleted,,,,
24,08/08/08,04:51:11,Database Cleanup Begin,,,,
25,08/08/08,04:51:11,0 leases expired and 0 leases deleted,,,,
25,08/08/08,04:51:11,0 leases expired and 0 leases deleted,,,,
24,08/08/08,05:51:13,Database Cleanup Begin,,,,
25,08/08/08,05:51:13,0 leases expired and 0 leases deleted,,,,
25,08/08/08,05:51:13,0 leases expired and 0 leases deleted,,,,
24,08/08/08,06:51:15,Database Cleanup Begin,,,,
25,08/08/08,06:51:15,0 leases expired and 0 leases deleted,,,,
25,08/08/08,06:51:15,0 leases expired and 0 leases deleted,,,,
11,08/08/08,07:12:32,Renew,192.168.1.52,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,07:17:10,Renew,192.168.1.51,XXXXXX.domainname.com,xxxxxxxxxxxx
11,08/08/08,07:20:34,Renew,192.168.1.110,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,07:44:33,Renew,192.168.1.20,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,07:44:38,Renew,192.168.1.50,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,07:49:56,Renew,192.168.1.54,XXXXXX.domainname.com,xxxxxxxxxxxx,
11,08/08/08,07:49:59,Renew,192.168.1.54,XXXXXX.domainname.com,xxxxxxxxxxxx,
24,08/08/08,07:51:16,Database Cleanup Begin,,,,
25,08/08/08,07:51:16,0 leases expired and 0 leases deleted,,,,
25,08/08/08,07:51:16,0 leases expired and 0 leases deleted,,,,
24,08/08/08,08:51:18,Database Cleanup Begin,,,,
25,08/08/08,08:51:18,0 leases expired and 0 leases deleted,,,,
25,08/08/08,08:51:18,0 leases expired and 0 leases deleted,,,,
11,08/08/08,09:04:16,Renew,192.168.1.107,XXXXXX.domainname.com,xxxxxxxxxxxx,
24,08/08/08,09:51:20,Database Cleanup Begin,,,,
25,08/08/08,09:51:20,0 leases expired and 0 leases deleted,,,,
25,08/08/08,09:51:20,0 leases expired and 0 leases deleted,,,,
NivleshCommented:
HI

 yeah thats more than enough. Have a look in the leases section of the dhcp to check who all are holding on to the ips. your logs show that .199 has successfully obtained the ip from the dhcp server. ensure that the mac reported in the dhcp server and that of the workstation are the same and that no one else is hijacking it.

as for internet connectivity, check to ensure that all the necessary network settings have been obtained by the client.. gateway, dns etc and that none are statically setup on that workstation. best ping www.yahoo.com or some other external site using their dns and the their name and ensure both go through. if they dont resolve on dns but go through on ip then its a dns entry problem. also, do you have any internet filtering on your gateway or network? for instance proxy servers, rules on your router that might be blocking this one workstation? also check any locally installed firewals on that pc.. there was a problem with zonealarm that broke internet connection when a recept windows update was applied.

cheers
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
DHCP

From novice to tech pro — start learning today.