Solved

DHCP Entries in ADSI Edit

Posted on 2013-02-07
6
2,532 Views
Last Modified: 2013-02-08
I have two DHCP servers (W2K8 R2 Domain) on my network, both have a /23 subnet, server01 hands out IPs in the 192.168.0.x range and server02 hands out IPs in the 192.168.1.x range. Server01 is on a TMG 2010 server. Server01 is NOT handing out addresses, even though the server appears to be authorized and the scope is activated.

So I looked into ADSI Edit to see the entries listed there and this is what I found:

NAME
CN=server01.mydomain.netCNF:ba47eb2c-3c6e-479b-a2d3-837a2a78d437

DISTINGUISHED NAME
CN=server01.mydomain.net\OACNF:ba47eb2c-3c6e-479b-a2d3-837a2a78d437,CN= NetServices,CN=Services,CN=Configuration,DC=MYDOMAIN,DC=NET


NAME
CN=server02.mydomain.net

DISTINGUISHED NAME
CN=server02.mydomain.net,CN=NetServices,CN=Services,CN=Configuration,DC=MYDOMAIN,DC=NET

The server01 appears to be a conflict item which would cause it not to work properly. So I need to know, do I deactivate the scope then unauthorized the server for server01 using the DHCP MMC or can I just manually delete the CNF entry in ADSI Edit?

Will deleting the entry manually in ADSI Edit cause any issues with Exchange, AD, etc?

Will I still have to deactivate the scope then unauthorized the server for server01 using the DHCP MMC afterwards as well?

Thx for any help.
0
Comment
Question by:Riker1964
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 250 total points
ID: 38866928
Match the entries with your running DHCP server and you can remove the stale and additional one from ADSI edit

Event if by mistake you remove the entry of working DHCP server then you can re-add the same by re-authorize the DHCP
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 38866947
I would do the changes from the DHCP console and not goto adsiedit if I can help it.
0
 
LVL 16

Expert Comment

by:Bruno PACI
ID: 38867735
Hi,

Is there something on the DHCP console that make you suppose your issue is about AD authorization of the DHCP server ??

As you told this DHCP server is also a TMG server, what did you do on TMG to allow DHCP request to reach the DHCP service ?????

Have a nice day
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 

Author Comment

by:Riker1964
ID: 38867858
For Server01, which is listed in ADSI Edit as the conflicted server, when I try to UNAUTHORIZE using the DHCP MMC, it tells me "There is no such object on the server".

So it seems like I will have to manually remove the entry for Server01 in ADSI Edit, then remove the DHCP Role from Server01, then add the DHCP Role back in and try to re-authorize it.

I just wanted to make sure that I can manually remove the conflicted entry in ADSI Edit without causing any issues in Active Directory. I don't want to have to go through an AD Restore.
0
 

Author Comment

by:Riker1964
ID: 38867988
Also, under ADSI Edit, Services, NetServices, I see CN=DhcpRoot. When I go into that object's properties, and go down to dhcpservers, I see this:

¡192.168.1.1$rcn=server01.mydomain.net$f0x00000000$sserver01.mydomain.net$

This is the conflicted dhcp server, I do not see the server02 192.168.1.3 listed there, but it is listed as the 3rd entry in NetServices. Server02 is my current DHCP server that is working fine.

Do I need to remove the ¡192.168.1.1$rcn=server01.mydomain.net$f0x00000000$sserver01.mydomain.net$ entry as well?
0
 
LVL 18

Assisted Solution

by:Sarang Tinguria
Sarang Tinguria earned 250 total points
ID: 38870311
Yes ....if the DHCP server does not working then it should not be present in ADSIEDIT  as I already suggested that you may remove the entry of DHCP servers which are not present ...I am not suggesting to remove entire entry of CN=DhcpRoot but under that you will see entry of dhcp server ...remove that
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question