Re: DHCP and private IP's

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 02/20/05


Date: Sun, 20 Feb 2005 14:53:21 +0100

Hi Merv and Max,

It is some W2k3 server thingy, which doesn't get automatically the admin
account for authorizing DHCP. So as soon as DHCP is setup, you will get that
message in the eventlog and you will have to set the admin account (which I
would use) only once.

-- 
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> schreef in bericht
news:OhI9BVwFFHA.1348@TK2MSFTNGP14.phx.gbl...
> I checked 3 SBS 2003 servers and all are using the administrator
> account/password for this.  I don't think I was responsible for this.  I
> think it was set up by SBS during the initial installs.
>
> -- 
> Merv  Porter  [SBS MVP]
> ===================================
>
>
> "Max" <Max@discussions.microsoft.com> wrote in message
> news:63BBA101-EA36-47F5-90C3-125B09023F3A@microsoft.com...
> > Marina (and Merv)
> >
> > What I am confused about is: Do I create a user account and supply this
> > accountID and pw to DHCP or do I simply use the administrator?  If I
> create a
> > new user account for the DHCP and DNS what priveledges to I give it??
> >
> > Thanks,
> > --max
> >
> > "Marina Roos [SBS-MVP]" wrote:
> >
> > > Hi Max,
> > >
> > > The errormessage is quite clear about what you should do. Read again.
> The
> > > easiest way to do it is via the DHCP snap in.
> > >
> > > -- 
> > > Regards,
> > >
> > > Marina
> > > Microsoft SBS-MVP
> > > One of the Magical M&M's
> > >
> > > "Max" <Max@discussions.microsoft.com> schreef in bericht
> > > news:37BC36A4-ACCD-4F7B-8CC9-0515FAC35B7B@microsoft.com...
> > > > I got a 1056 from the DHCPserver which is this:
> > > >
> > > > The DHCP service has detected that it is running on a DC and has no
> > > > credentials configured for use with Dynamic DNS registrations
> initiated by
> > > > the DHCP service. This is not a recommended security configuration.
> > > > Credentials for Dynamic DNS registrations may be configured using
the
> > > command
> > > > line "netsh dhcp server set dnscredentials" or via the DHCP
> Administrative
> > > > tool.
> > > >
> > > > Now I'm getting private IP's on my two connected PC's.
> > > >
> > > > I have Win2003 SBS with a D-Link wireless router plugged into the
> internal
> > > > side of the network.
> > > >
> > > > Any ideas of what to check??
> > > >
> > > > Thanks,
> > > > --max
> > >
> > >
> > >
>
>


Relevant Pages

  • Re: Help in finding account lockout source
    ... Sure enough there was the offending account. ... that somewhere in the logs it would have mentioned DHCP. ... STEVE!!! ... I didn't just put it back because we had an admin ...
    (microsoft.public.win2000.active_directory)
  • Re: DNS Server Refuses Updates from DHCP
    ... DHCP scope properties for the DHCP server to authenticate with the ... Is the only requirement for the domain account that runs DHCP that it ... enter a dedicated user account credentials. ...
    (microsoft.public.windows.server.dns)
  • Re: Windows DNS Server and non-microsoft clients
    ... properties, select the Advanced tab, click the Credentials button, ... enter the credentials for a dedicated user account that should ... is optional and is a security risk if you give the account to many ... I have found that if DHCP registers for even the Domain members that are ...
    (microsoft.public.windows.server.dns)
  • Re: DNS Server Refuses Updates from DHCP
    ... By default the memebers of the Authenticated users have the Permissions to create all child objects under Dns Zone, and this is one of other groups with less permissions defined by default in the Zone properties. ... I guess that if you don't want to take MS advise you can create another AD account and give that account permissions to create all child objects under the zone properties and that should be enough. ... Would there be any way to run the DHCP service ...
    (microsoft.public.windows.server.dns)
  • Re: DHCP security breach
    ... all authenticated users can create RRs in DNS zones. ... so if you configure your DHCP with a SIMPLE user account only ... important DNS records by preventing DHCP from rewriting them. ... ACL that this account must have on DNS zones. ...
    (microsoft.public.win2000.security)