After you start the Dynamic Host Configuration Protocol (DHCP) Server service on your Windows 2000 Server-based DHCP server, you may not be able to authorize the DHCP server in Active Directory. When you type the IP address or the name of the DHCP server in Active Directory, you may receive the following error message:
The DHCP Service could not contact Active Directory
This issue may occur for one of the following reasons:
- You may have insufficient rights to the Active Directory Configuration container. Without sufficient rights, you cannot make changes to the DHCP server objects that are in the Configuration container.
- The Authorize command may be missing from the Action menu in the DHCP Microsoft Management Console (MMC) snap-in.
To resolve this issue, use one of the following methods, depending on which one of the reasons that are listed in the "Cause" section applies to your computer.
Method 1Confirm that your DHCP server can contact the global catalog server that is in your domain. To test the global catalog servers, use the Network Diagnostics utility (Netdiag.exe), or use the LDP.exe utility.
Additionally, make sure that you are logged on as a member of the Domain Administrators group for the domain where you want to add the DHCP server, and that you are logged on as a member of the Enterprise Administrators group for the Active Directory Forest.
Method 2For additional information about an issue where the Authorize Command is missing in Dynamic Host Configuration Protocol, click the following article number to view the article in the Microsoft Knowledge Base:
246603 Authorize Command is missing in Dynamic Host Configuration Protocol snap-in
Windows 2000 can block rogue DHCP servers. Each DHCP server that is part of the domain must be authorized. If a DHCP server that is part of the domain is not authorized, it will not distribute IP addresses.For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
300429 How to install and configure a DHCP server in an Active Directory domain in Windows 2000
Article ID: 303317 - Last Review: Sep 2, 2009 - Revision: 1