Rogue DHCP test tool

Posted on 2012-09-12
Last Modified: 2012-09-20
I am using the Rogue DHCP test tool and it's showing me a very old server that doesnt' exist anymore. I tried looking in myAD to find it, but I'm not finding it.  Any help would be appreciated.
Question by:afacts
    LVL 18

    Accepted Solution


    netsh dhcp show server

    Open in new window


    and if you see that old DHCP server You will need to remove that from Adsiedit refer below link to resolve

    Author Comment

    when I typed that command, I got this error:

    "the following command was not found: dhcp show server"
    LVL 18

    Expert Comment

    "Netsh DHCP show server" copy paste without quotes else the link i have give also have this command

    Run on Domain Controller (I tried on that)
    open CMD in Run as administrator mode
    LVL 37

    Assisted Solution

    by:Bing CISM / CISSP
    what sort of test tool are you referring to? this one??
    LVL 18

    Expert Comment

    Or you may also open adsiedit directly and navigate to location given in article and see if you could find entry of that very old server that doesnt' exist
    LVL 39

    Assisted Solution

    by:Krzysztof Pytko
    Netsh with DHCP context works only on Windows Server editions, you cannot access this context from PC

    However, I would check that a little different way. Open Active Directory Sites and Services and follow below steps:

    1) In console, select root node Active Directory Sites and Services
    2) From menu choose "View -> Show Services Node"
    3) In console in the list, you should see now "Services" node below "Sites"
    4) Expand "Services" node and go to "NetSerices" node
    5) In the right pane search for that "rogue" DHCP server using its DNS name and IP address
    6) If it was found, select it, and click right mouse button. Choose "Delete"

    This procedure is to cleanup AD from inproperly removed DHCP servers


    Author Comment

    Thanks everyone, I was able to get the command to work: Netsh DHCP show server

    Here's my other problems, I've attached the file with the output.
    So I have some problems, for example, currently, the following servers are DCs, (DC1 and DC3)

    DC2 used to be a few weeks ago, but I need to remove it.  Then Loudcry and Freewill are very old servers that again are no longer in use.  The problem is, that the IP address of loudcry ( is in use, as my cluster IP address, as I am using Hyper V in a cluster environment.  Also, the IP address of DC3 is, which in this screenshot is listed as DC2, which is not accurate, as I used the IP address of DC2 for DC3, and just turned off DC2, which I plan to delete.

    How would I fix this mess?

    Author Comment

    ok, so after going to net services, I see the following servers:

    So DC1 and DC3 are ok.  DC2 I plan to delete the VM, so I'm guessing that can be removed?
    Also what is DhcpRoot entry, as when I looked at the properties, (dhcpServer) property listed the loudcry and the IP

    So not sure if I can delete that or not, as my cluster IP now is the

    Author Closing Comment

    Thanks for the help, got it fixed.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now