Home All Groups Group Topic Archive Search About
Author
29 Jan 2006 4:34 PM
Wild Packet
--------------------------------------------------------------------------

      Not often but sometimes I see this message on my both DHCP Servers
Event Viewer. Though the configuration is correct.


      Event Type: Warning
      Event Source: DhcpServer
      Event Category: None
      Event ID: 1056
      Date: 1/28/2006
      Time: 2:18:30 PM
      User: N/A
      Computer: SERVER01
      Description:
      The DHCP service has detected that it is running on a DC and has no
credentials configured for use with Dynamic DNS registrations initiated by
the DHCP service. This is not a recommended security configuration.
Credentials for Dynamic DNS registrations may be configured using the
command line "netsh dhcp server set dnscredentials" or via the DHCP
Administrative tool.

      Advise please.

      Thank you.

Author
29 Jan 2006 4:45 PM
Jorge de Almeida Pinto [MVP]
see for more information:
http://support.microsoft.com/kb/255134/en-us
http://technet2.microsoft.com/WindowsServer/en/Library/179d4f6c-9482-4dac-8f03-74bd78b7d2631033.mspx
http://technet2.microsoft.com/WindowsServer/en/Library/d0e19b57-c368-46c2-b017-caf25ae150ec1033.mspx

you could also use www.eventid.net, enter the event ID and read the
information about it on your own.
http://www.eventid.net/display.asp?eventid=1056&eventno=3841&source=DhcpServer&phase=1

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
MVP Windows Server - Directory Services
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
Show quoteHide quote
"Wild Packet" <mailtomoh***@hotmail.com> wrote in message
news:uWLfRHPJGHA.1192@TK2MSFTNGP11.phx.gbl...
>
>
> --------------------------------------------------------------------------
>
>      Not often but sometimes I see this message on my both DHCP Servers
> Event Viewer. Though the configuration is correct.
>
>
>      Event Type: Warning
>      Event Source: DhcpServer
>      Event Category: None
>      Event ID: 1056
>      Date: 1/28/2006
>      Time: 2:18:30 PM
>      User: N/A
>      Computer: SERVER01
>      Description:
>      The DHCP service has detected that it is running on a DC and has no
> credentials configured for use with Dynamic DNS registrations initiated by
> the DHCP service. This is not a recommended security configuration.
> Credentials for Dynamic DNS registrations may be configured using the
> command line "netsh dhcp server set dnscredentials" or via the DHCP
> Administrative tool.
>
>      Advise please.
>
>      Thank you.
>
>
Author
29 Jan 2006 4:54 PM
Herb Martin
>      The DHCP service has detected that it is running on a DC and has no
> credentials configured for use with Dynamic DNS registrations initiated by
> the DHCP service. This is not a recommended security configuration.
> Credentials for Dynamic DNS registrations may be configured using the
> command line "netsh dhcp server set dnscredentials" or via the DHCP
> Administrative tool.
>

It means pretty much what it says.

(New) in Windows 2003 you can set credentials used by
the DHCP server for updating dynamic DNS.

As it mentions above, you can do this with "netsh.exe" (command
line), OR you can do it on the DHCP server's properties (Advanced
tab I believe, but it's on one of the property sheets.)

It's a good idea.  This account does not need 'special powers' and
so should be created specifically for this purpose, probably similar
to an ordinary user.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Show quoteHide quote
"Wild Packet" <mailtomoh***@hotmail.com> wrote in message
news:uWLfRHPJGHA.1192@TK2MSFTNGP11.phx.gbl...
>
>
> --------------------------------------------------------------------------
>
>      Not often but sometimes I see this message on my both DHCP Servers
> Event Viewer. Though the configuration is correct.
>
>
>      Event Type: Warning
>      Event Source: DhcpServer
>      Event Category: None
>      Event ID: 1056
>      Date: 1/28/2006
>      Time: 2:18:30 PM
>      User: N/A
>      Computer: SERVER01
>      Description:
>      The DHCP service has detected that it is running on a DC and has no
> credentials configured for use with Dynamic DNS registrations initiated by
> the DHCP service. This is not a recommended security configuration.
> Credentials for Dynamic DNS registrations may be configured using the
> command line "netsh dhcp server set dnscredentials" or via the DHCP
> Administrative tool.
>
>      Advise please.
>
>      Thank you.
>
>
Author
29 Jan 2006 9:52 PM
Wild Packet
Thank you gentlemen for your response.

So I can create a normal user let's say "DHCPADMIN" with no rights what so
ever and this account I can use in the credentials, right???

Advise please.




Show quoteHide quote
"Herb Martin" <n***@LearnQuick.com> wrote in message
news:%23rDw7TPJGHA.216@TK2MSFTNGP15.phx.gbl...
>>      The DHCP service has detected that it is running on a DC and has no
>> credentials configured for use with Dynamic DNS registrations initiated
>> by the DHCP service. This is not a recommended security configuration.
>> Credentials for Dynamic DNS registrations may be configured using the
>> command line "netsh dhcp server set dnscredentials" or via the DHCP
>> Administrative tool.
>>
>
> It means pretty much what it says.
>
> (New) in Windows 2003 you can set credentials used by
> the DHCP server for updating dynamic DNS.
>
> As it mentions above, you can do this with "netsh.exe" (command
> line), OR you can do it on the DHCP server's properties (Advanced
> tab I believe, but it's on one of the property sheets.)
>
> It's a good idea.  This account does not need 'special powers' and
> so should be created specifically for this purpose, probably similar
> to an ordinary user.
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
> "Wild Packet" <mailtomoh***@hotmail.com> wrote in message
> news:uWLfRHPJGHA.1192@TK2MSFTNGP11.phx.gbl...
>>
>>
>> --------------------------------------------------------------------------
>>
>>      Not often but sometimes I see this message on my both DHCP Servers
>> Event Viewer. Though the configuration is correct.
>>
>>
>>      Event Type: Warning
>>      Event Source: DhcpServer
>>      Event Category: None
>>      Event ID: 1056
>>      Date: 1/28/2006
>>      Time: 2:18:30 PM
>>      User: N/A
>>      Computer: SERVER01
>>      Description:
>>      The DHCP service has detected that it is running on a DC and has no
>> credentials configured for use with Dynamic DNS registrations initiated
>> by the DHCP service. This is not a recommended security configuration.
>> Credentials for Dynamic DNS registrations may be configured using the
>> command line "netsh dhcp server set dnscredentials" or via the DHCP
>> Administrative tool.
>>
>>      Advise please.
>>
>>      Thank you.
>>
>>
>
>
Author
29 Jan 2006 10:19 PM
Jorge de Almeida Pinto [MVP]
Yes, just as Herb mentioned... a normal user account with NO special powers
or memberships.

"This account does not need 'special powers' and
so should be created specifically for this purpose, probably similar
to an ordinary user"

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
MVP Windows Server - Directory Services
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
Show quoteHide quote
"Wild Packet" <mailtomoh***@hotmail.com> wrote in message
news:%23qMF94RJGHA.524@TK2MSFTNGP09.phx.gbl...
> Thank you gentlemen for your response.
>
> So I can create a normal user let's say "DHCPADMIN" with no rights what so
> ever and this account I can use in the credentials, right???
>
> Advise please.
>
>
>
>
> "Herb Martin" <n***@LearnQuick.com> wrote in message
> news:%23rDw7TPJGHA.216@TK2MSFTNGP15.phx.gbl...
>>>      The DHCP service has detected that it is running on a DC and has no
>>> credentials configured for use with Dynamic DNS registrations initiated
>>> by the DHCP service. This is not a recommended security configuration.
>>> Credentials for Dynamic DNS registrations may be configured using the
>>> command line "netsh dhcp server set dnscredentials" or via the DHCP
>>> Administrative tool.
>>>
>>
>> It means pretty much what it says.
>>
>> (New) in Windows 2003 you can set credentials used by
>> the DHCP server for updating dynamic DNS.
>>
>> As it mentions above, you can do this with "netsh.exe" (command
>> line), OR you can do it on the DHCP server's properties (Advanced
>> tab I believe, but it's on one of the property sheets.)
>>
>> It's a good idea.  This account does not need 'special powers' and
>> so should be created specifically for this purpose, probably similar
>> to an ordinary user.
>>
>> --
>> Herb Martin, MCSE, MVP
>> Accelerated MCSE
>> http://www.LearnQuick.Com
>> [phone number on web site]
>>
>> "Wild Packet" <mailtomoh***@hotmail.com> wrote in message
>> news:uWLfRHPJGHA.1192@TK2MSFTNGP11.phx.gbl...
>>>
>>>
>>> --------------------------------------------------------------------------
>>>
>>>      Not often but sometimes I see this message on my both DHCP Servers
>>> Event Viewer. Though the configuration is correct.
>>>
>>>
>>>      Event Type: Warning
>>>      Event Source: DhcpServer
>>>      Event Category: None
>>>      Event ID: 1056
>>>      Date: 1/28/2006
>>>      Time: 2:18:30 PM
>>>      User: N/A
>>>      Computer: SERVER01
>>>      Description:
>>>      The DHCP service has detected that it is running on a DC and has no
>>> credentials configured for use with Dynamic DNS registrations initiated
>>> by the DHCP service. This is not a recommended security configuration.
>>> Credentials for Dynamic DNS registrations may be configured using the
>>> command line "netsh dhcp server set dnscredentials" or via the DHCP
>>> Administrative tool.
>>>
>>>      Advise please.
>>>
>>>      Thank you.
>>>
>>>
>>
>>
>
>
Author
30 Jan 2006 2:08 PM
Kevin D. Goodknecht Sr. [MVP]
Jorge de Almeida Pinto [MVP] wrote:
> Yes, just as Herb mentioned... a normal user account with NO special
> powers or memberships.
>
> "This account does not need 'special powers' and
> so should be created specifically for this purpose, probably similar
> to an ordinary user"

The account should have a non-expiring strong password.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================
Author
29 Jan 2006 5:00 PM
Kevin D. Goodknecht Sr. [MVP]
Wild Packet wrote:

>       The DHCP service has detected that it is running on a DC and
> has no credentials configured for use with Dynamic DNS registrations
> initiated by the DHCP service. This is not a recommended security
> configuration. Credentials for Dynamic DNS registrations may be
> configured using the command line "netsh dhcp server set
> dnscredentials" or via the DHCP Administrative tool.

This is a pretty self explanitory event, you should create a dedicated user
account with a non-expiring password for the DHCP server to authenticate
with DNS.
http://support.microsoft.com/kb/816592/en-us#XSLTH4271121122120121120120

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================
Author
30 Jan 2006 1:30 PM
WILDPACKET
Thank you gentlemen.




Show quoteHide quote
"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Wild Packet wrote:
>
> >       The DHCP service has detected that it is running on a DC and
> > has no credentials configured for use with Dynamic DNS registrations
> > initiated by the DHCP service. This is not a recommended security
> > configuration. Credentials for Dynamic DNS registrations may be
> > configured using the command line "netsh dhcp server set
> > dnscredentials" or via the DHCP Administrative tool.
>
> This is a pretty self explanitory event, you should create a dedicated user
> account with a non-expiring password for the DHCP server to authenticate
> with DNS.
> http://support.microsoft.com/kb/816592/en-us#XSLTH4271121122120121120120
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>