Solved

DHCP issues after imaging PCs

Posted on 2011-03-07
15
390 Views
Last Modified: 2012-05-11
Windows Server 2003, GhostCast Server 11, Windows XP

We recently ghosted about 100 new computers with an image we have been using for about a year without an issue.  However, with these new computers they are showing up in our DHCP server with blank names.  The wierd thing is that after ghosting them they were changed to static IPs, but they are still showing up on DHCP server as leased even though you cannot ping that address.  If I delete them they just come right back.  I tracked the PCs down by the MAC and checked the bios setup and don't see anything different, wake on lan(off) or anything.  It's like the DHCP server cached the leased address during the ghost process and won't let them go.  Any ideas?

TIA
0
Comment
Question by:NDaZone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
15 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 35059450
Did you run NEWSID on systems to get a NEWSID?

Are the MAC addresses the same?
0
 
LVL 12

Expert Comment

by:nsx106052
ID: 35059494
I would either run NEWSID or change the computer name after imaging.  
0
 

Expert Comment

by:wsutton74
ID: 35059549
When finalizing your image, once you have your default profile set, run Sysprep with the Generalize option and shutdown option and then make the image. This will ensure that the computer is unique on your network when you deploy the image.
0
Major Incident Management Communications

Major incidents and IT service outages cost companies millions. Often the solution to minimizing damage is automated communication. Find out more in our Major Incident Management Communications infographic.

 

Author Comment

by:NDaZone
ID: 35059561
I was told that ours is setup to automatically assign a new SID, but I will check them.  And all the computers were renamed after imaging.
0
 

Author Comment

by:NDaZone
ID: 35059626
I verified that the computer SIDs are different.
0
 

Author Comment

by:NDaZone
ID: 35059730
All the computers have static IPs, different computer names and different SIDs.  However, their MAC addresses still show up in DHCP as blank names with the IP address that they were ghosted with.
0
 
LVL 9

Expert Comment

by:discgman
ID: 35060027
Did you check the arp table on the dhcp server. We had a problem here where the server wasnt releasing the arp table mac addresses. It would hang onto them which then was messing with the scope and the computers trying to talk to other servers.
0
 

Author Comment

by:NDaZone
ID: 35060957
I looked at the arp table and there were a few of those computers in there as dynamic entries.  I cleared the arp table and even specifically deleted by IP and they still keep showing up in the DHCP leases.  I thought you were on to something with that one.
0
 
LVL 9

Expert Comment

by:discgman
ID: 35061118
Have you tried creating reservations in the scope instead of doing the static ip addresses?
0
 

Author Comment

by:NDaZone
ID: 35061468
And that is the main issue.  We don't have statics in the DHCP scope, the client LAPTOPS are the only ones on DHCP (all desktops are static).  We have a lot of laptop users that move around between this office and others so it would be impossible to reserve IPs.  We keep running out of addresses already, but only because of these blank leases.  When a laptop user can't get on the network I go in and delete these and they're in.
0
 
LVL 9

Expert Comment

by:discgman
ID: 35062024
Leases are retained in the DHCP server database four hours after expiration.
This grace period protects a client lease in case the client and server are
in different time zones, the individual computer clocks are not
synchronized, or the client computer is off the network when the lease
expires. Expired leases are included in the list of active leases and are
distinguished by a different icon.

By default, the cleanup cycle occurs every 60 minutes. You can adjust the
duration of the default grace period after which an expired lease is marked
for deletion by editing the following key in the registry:

Here we go:

So you can remove the 4 hour grace period:
HKLM\System\CurrentControlSet\Services\DHCPServer\Parameters\LeaseExtension
Value Type: DWORD
Value Data: time in minutes

And make the cleanup interval smaller:
HKLM\System\CurrentControlSet\Services\DHCPServer\Parameters\DatabaseCleanupInterval
turn it to half (1e)
0
 

Author Comment

by:NDaZone
ID: 35068888
That is true, but we have been having this issue for weeks now.  Every time I delete them they come right back after about ten minutes, most of the time renewing the lease with the same IP address.  However I cannot ping that IP address.  It's like the DHCP server receives the request and issues out an IP address but the client never obtains it because they are configured statically.

Back to your examples for future reference.  I have the registry entry for cleanup but not the grace period, is that one that should exist or one that needs to be created?

Thx
0
 

Author Comment

by:NDaZone
ID: 35068984
One more note, if I telnet in to the clients default gateway, Cisco, and show arp....they show up in there as the same non-existing MAC-to-IP addresses as in DHCP.
0
 
LVL 9

Accepted Solution

by:
discgman earned 500 total points
ID: 35088451
Remember to backup your registry anytime you make any changes and do so at your own risk!

Yes you can create this dword entry, then change the value time to adjust. See if that makes any difference in how the laptops are connecting to the network.
0
 

Author Comment

by:NDaZone
ID: 35354681
Found the issue finally.  The new Dell computers we sent out have a hidden Wake on LAN feature.  during the POST you have to hit F2 to get into the Power Management/Remote wakeup features.  We turned it off in there and now our "Ghost" DHCP addresses are gone.

Discgman, giving you half the points just for sticking it out with me and helping.  Thanks man!!
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
Create your own, high-performance VM backup appliance by installing NAKIVO Backup & Replication directly onto a Synology NAS!
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question