Dhcp ошибка 1056

The DHCP service is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.Microsoft strongly recommends the use of DNSCredentials when you are running the DHCP Server service and DNS services on the same domain controller to ensure the integrity of Secure Dynamic Updates.

A DHCP server can enable dynamic updates in the DNS namespace for any one of its clients that support these updates. Clients can use the DNS dynamic update protocol to update their host name-to-address mapping information whenever changes occur to their DHCP-assigned address. (This mapping information is stored in zones on the DNS server.) A DHCP server can perform updates on behalf of its DHCP clients to any DNS server, but it must first supply proper credentials.

The Netsh.exe tool can be used to configure the impersonation credentials. You must create a dedicated user account in Active Directory Domain Services before you use the Netsh.exe tool to configure the use of impersonation credentials.

========
Events:
========

Log Name:      System
Source:        Microsoft-Windows-DHCP-Server
Date:          20/04/2017 10:54:22 AM
Event ID:      1056
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:       Domain.com
Description:
The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic DNS registrations may be configured using the command line “netsh dhcp server set dnscredentials” or via the DHCP Administrative tool.

================
Requirements:
================

— Membership in the Administrators or DHCP Administrators group is the minimum required to complete this procedure.

— A “normal” user account with below requirements.

Recommendations for Credentials:

— To configure the credentials you need to use a “normal” user account, not an administrative or privileged account, for the alternate credentials.

— Just make sure to use the Password Never Expires option. There is not need to add this account to any special group. The steps to configure these credentials are documented in http://support.microsoft.com/kb/282001.

— If there are more than one DHCP Server in the environment, try to use the same account for the alternate credentials in all of them.

========================
Resolution:
========================

— Run “netsh dhcp server show dnscredentials” to find any credentials are configured on DHCP server.

C:\Windows\system32>netsh dhcp server show dnscredentials

The credentials used for DNS Dynamic registrations:
User Name :
Domain :

— You can also verify by opening DHCP console.

Under the server(SERVER) → Right Click on IPV4 and go to properties → Go to advance tab → click on Credentials.

Procedure to set credentials:

A) Using the DHCP manager:

• Start → Administrative Tools →  DHCP.
• Under server → Right-click the IPv4 or IPv6 → Select Properties.

• Select the Advanced tab → Select credentials. 

  

• Add the user credentials that was previously created..
• Click OK
• You can repeat these same steps to change the DHCP credentials for the updates of IPv6-related DNS entries, except this time you must start from the IPv6 container in the DHCP snap-in.
  

B) Using CMD:

— Run below command on CMD (Administrator Mode) by replacing UserID & Password.

C:\Windows\system32/netsh dhcp server set dnscredentials UserID Password
Command completed successfully.

— Restart DNS for changes to take effect.

C:\Windows\system32/net stop dhcpserver &  net start dhcpserver
The DHCP Server service is stopping.
The DHCP Server service was stopped successfully.

The DHCP Server service is starting…
The DHCP Server service was started successfully.

— To confirm if the credentials has been successfully configured.

C:\Windows\system32/netsh dhcp server show dnscredentials
The credentials used for DNS Dynamic registrations:
Username : UserID
Domain : Domain.com

— Check if below event has been generated.

Log Name:      System
Source:        Microsoft-Windows-DHCP-Server
Date:          9/11/2016 9:49:34 PM
Event ID:      1044
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      Domain.com
Description:
The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain ironworkers.local, has determined that it is authorized to start. It is servicing clients now.

— The event should now be stopped occurring in the eventvwr.

=======
Ref:
=======

• https://technet.microsoft.com/en-us/library/cc774834(v=ws.10).aspx 
• http://blogs.technet.com/b/stdqry/archive/2012/04/03/dhcp-server-in-dcs-and-dns-registrations.aspx

Мар 16, 2015 13:05

I’ve installed Windows Server 2012 Standard and everything is running fine except that my DHCP is not issuing IP addresses.

 
1. Error 1046 — The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain kimosabeit.com, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons
for this: 
This machine is part of a directory service enterprise and is not authorized in the same domain.  (See help on the DHCP Service Management Tool for additional information). 

 
This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized. 

 
Some unexpected network error occurred.

 
*** For this problem I tried running command prompt and entered: 

 
C:\Users\Administrator>netsh dhcp add server kimosabeit.com 192.168.1.1

 
Adding server kimosabeit.com, 192.168.1.1

 
Command completed successfully.

 
C:\Users\Administrator>netsh dhcp show server

 
2 Servers were found in the directory service:

 
        Server [kimosabeit.com] Address [192.168.1.1] Ds location: cn=kimosabeit.com

 
        Server [server.kimosabeit.com] Address [192.168.1.1] Ds location: cn=server.kimosabeit.com

 
 Command completed successfully.

 
2. Error 1059 — The DHCP service failed to see a directory server for authorization.

 
3. Error 1056 — The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic
DNS registrations may be configured using the command line «netsh dhcp server set dnscredentials» or via the DHCP Administrative tool.

 
This is my second attempt at installing a local home network with the Network ID: 192.168.1.0 and my Gateway is 192.168.1.254

 
What are the steps to resolve this issue with ADSIedit.msc??? I’ve tried to follow the steps in the knowledge base but failed.