Export (0) Print
Expand All

Event ID 1111 — DHCP Server Rogue Detection

Updated: January 8, 2009

Applies To: Windows Server 2008 R2

green

When configured correctly and authorized for use on a network, Dynamic Host Configuration Protocol (DHCP) servers provide a useful administrative service. However, a misconfigured or unauthorized DHCP server can cause problems. For example, if an unauthorized DHCP server starts, it might begin either leasing incorrect IP addresses to clients or negatively acknowledging DHCP clients that attempt to renew current address leases.

To resolve these issues, DHCP servers are verified as authorized in Active Directory Domain Services before they can service clients and unauthorized, or rogue, servers are detected. This prevents most of the accidental damage caused by either misconfigured DHCP servers or correctly configured DHCP servers running on the wrong network.

Event Details

Product: Windows Operating System
ID: 1111
Source: Microsoft-Windows-DHCP-Server
Version: 6.1
Symbolic Name: DHCP_ROGUE_LOG_RESTART
Message: Restarting rogue detection%0

Resolve

This is a normal condition. No further action is required.

Related Management Information

DHCP Server Rogue Detection

DHCP Infrastructure

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft