question

ECB532-1562 avatar image
0 Votes"
ECB532-1562 asked DSPatrick answered

Old Domain Controllers Showing as Authorized Servers

I have 2 old domain controllers that no longer exist showing in the "Manage Authorized Servers" in "DHCP", when I try to unauthorize them I get an error that says "There is no such object on the server."

windows-dhcp-dns
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered DSPatrick edited

Try right click on ADSI Edit and click connect to. In connection settings, connection point, select or type a Distinguished Name or Naming Context. Enter CN=NetServices,CN=Services,CN=Configuration,DC=Your Domain,DC=com then click ok.

Expand the default naming context, highlight the path in the left pane, and you should see CN=DhcpRoot on the right.

Double click it, and then check for and edit the dhcpServers attribute to reflect the correct computers. The restart DHCP service.

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

You're welcome.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ECB532-1562 avatar image
0 Votes"
ECB532-1562 answered

Awesome. Thank you so much!

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered

That should be correct having them in CN=NetServices only. As a test here I unauthorized and that removed the server in CN=NetServices, then I reauthorized it and it was added back to CN=NetServices, nothing in the dhcpServers attribute.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ECB532-1562 avatar image
0 Votes"
ECB532-1562 answered

Yeah I added the current ones to the dhcpServers attribute and removed the old ones. The current ones are listed in CN=NetServices and 1 of the old ones is listed with them.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered

Did you manually add them also to dhcpServers attribute? At some point I think the location changed. The active ones are also in CN=NetServices right? I think that is sufficient to have them in in CN=NetServices.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ECB532-1562 avatar image
0 Votes"
ECB532-1562 answered

Okay thanks. Now when I run Get-DhcpServerInDC it shows the current domain controllers but they are listed twice. Is that okay?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered

So to clear it's in the CN=NetServices container and the domain controller is gone anyway then yes it should be fine.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ECB532-1562 avatar image
0 Votes"
ECB532-1562 answered

Is it also safe to delete the old CN=olddomaincontroller.mydomain.com record that's listed under the CN=DhcpRoot file?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered

Ok, yes and I think you'll need to restart the DHCP service as well after removing the bogus ones.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.