DHCP post-install configuring is impossible to finish.

hi there!

i've deployed read-only dc based on winsrv-2016 std core remote office. connected main office via site2site vpn. 

i've deployed dhcp-role on rodc looks went wrong because post-install task has finished error it's impossible create security groups administrative rights delegation: dhcp users и dhcp administrators.

nevertheless, dhcp has been authorized in ad , serving client's requests without problems.

@ same time, i'm seeing alert "dhcp server - configuration failed on xx-yy-rdc5" @ server manager tasks area.

when run task "post-install dhcp configuration wizard" again finishes errors 50 , 2007. obvious because proper security groups have existed , dhcp has authored in ad.

have simple question - how can cancel post-install configuring task?

hi，

>>because post-install task has finished error it's impossible create security groups administrative rights delegation: dhcp users и dhcp administrators.

to add dhcp default local security groups:

1 click start, click programs, click accessories, right-click command prompt, , click run administrator.

2 click yes if prompted user account control, type netsh dhcp add securitygroups , press enter.

>>how can cancel post-install configuring task?

to resolve issue, follow these steps add service accounts mentioned in error (in general is, domain\serveradmin$ anddomain\mediaadmin$) "log on service" group policy setting.

1. start group policy management console (gpmc). this, take 1 of following actions: press windows logo key + r open the rundialog box, type gpmc.msc in text box, , click ok or press enter. or, click start, click in the start search box, type gpmc.msc, , press enter.
2. right-click default domain controllers policy, , click edit.
3. browse computer configuration\windows settings\security settings\local policies\user rights assignment.
4. in details pane, double-click log on service.
5. make sure the define these policy settings check box selected, , click add user or group.
6. type name of service account mentioned in error example, type domain\serveradmin$ ordomain\mediaadmin$. or, click browse to locate account the select users, computers, or groups dialog box, , click ok.
7. after have account name entered, click ok in the add user or group dialog box, , click ok in the allow log on locally properties dialog box.
8. to update modified group policy manually, @ command prompt, type gpupdate, , press enter.
9. rerun post-deployment configuration task.

 

 

best regards,

frank

---

please remember mark replies answers if , unmark them if provide no help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  Windows Server 2016 General