Can a RODC also be a DHCP ?

Sounds like a no-brainer, but there is catch. I installed DHCP role on my Server Core that I had previously set up as Read-only Domain Controller, using this command.

start /w ocsetup DHCPServerCore

And then I went ahead and set the service configuration to “auto” with this command,

sc config dhcpserver start= auto (note the space between the equal sign and auto)

And then finally when I tried to start the DHCP service with the following command, it failed with these errors.

net start dhcpserver

A system error has occured

System error 50 has occured

The request is not supported

So the catch was, that since RODC can’t write back to the AD to create the needed DHCP security groups i.e DHCP Administrators and DHCP Users, the service would fail.

After creating those domain local security groups on another Windows Server 2008 RWDC, the service does run successfully and you can manage the DHCP Server (that is running on Server Core) from another server using RSAT.

4 Comments

  1. Dav[e]tech says:

    Hey,

    Just wondering if this scenario is where you are setting up a single DHCP server in the domain or adding an additional, as i would assume these groups would already exist if there were pre-existing DHCP servers in the domain?

    thanks.

  2. Rick says:

    You are correct Dave. This would be for introducing first DHCP server in your environment.

    Thanks,

  3. Sanket says:

    Guys,
    I’m having 1 DC with 4 RODC’s.
    And i got the same error on 1 of my RODC’s though i’m already running 1 dhcp on my DC.

  4. Rick says:

    Do the pertinent Groups exist in your AD ?

    It is however recommended to at least have two RWDC in your environment for redundancy.s

Leave a Reply