{
	"id": "4ae6af1f-001b-4891-ad00-3bcdb416155c",
	"created_at": "2026-04-06T00:11:23.161762Z",
	"updated_at": "2026-04-10T03:20:38.59682Z",
	"deleted_at": null,
	"sha1_hash": "1f0b2d7a4910bdc31f3d1df544a75127dc2408f1",
	"title": "DHCP Server Operational Events",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 66180,
	"plain_text": "DHCP Server Operational Events\r\nBy Archiveddocs\r\nArchived: 2026-04-05 18:59:56 UTC\r\nEvent ID\r\nEvent category\r\nEvent text\r\n1000\r\nEVENT_SERVER_UNKNOWN_OPTION\r\nThe DHCP service received the unknown option %1, with a length of %2. The raw option data is given below.\r\n1001\r\nEVENT_SERVER_FAILED_REGISTER_SC\r\nThe DHCP service failed to register with Service Controller. The following error occurred: %n%1.\r\n1002\r\nEVENT_SERVER_INIT_DATA_FAILED\r\nThe DHCP service failed to initialize its global parameters. The following error occurred: %n%1\r\n1003\r\nEVENT_SERVER_INIT_REGISTRY_FAILED\r\nThe DHCP service failed to initialize its registry parameters. The following error occurred: %n%1\r\n1004\r\nEVENT_SERVER_INIT_DATABASE_FAILED\r\nThe DHCP service failed to initialize the database. The following error occurred: %n%1\r\n1005\r\nEVENT_SERVER_INIT_WINSOCK_FAILED\r\nThe DHCP service failed to initialize Winsock startup. The following error occurred: %n%1\r\n1006\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 1 of 20\n\nEVENT_SERVER_INIT_RPC_FAILED\r\nThe DHCP service failed to start as a RPC server. The following error occurred : %n%1\r\n1007\r\nEVENT_SERVER_INIT_SOCK_FAILED\r\nThe DHCP service failed to initialize Winsock data. The following error occurred: %n%1\r\n1008\r\nEVENT_SERVER_SHUTDOWN\r\nThe DHCP service is shutting down due to the following error: %n%1\r\n1009\r\nEVENT_SERVER_CLIENT_CLEANUP\r\nThe DHCP service encountered the following error while cleaning up the pending client records: %n%1\r\n1010\r\nEVENT_SERVER_DATABASE_CLEANUP\r\nThe DHCP service encountered the following error while cleaning up the database: %n%1\r\n1011\r\nEVENT_SERVER_LEASE_NACK\r\nThe DHCP service issued a NACK (negative acknowledgement message) to the client, %2, for the address, %1.\r\n1012\r\nEVENT_SERVER_LEASE_DECLINED\r\nThe DHCP client, %2, declined the address %1.\r\n1013\r\nEVENT_SERVER_LEASE_RELEASE\r\nThe DHCP Client, %2, released the address %1.\r\n1016\r\nEVENT_SERVER_DATABASE_BACKUP\r\nThe DHCP service encountered the following error when backing up the database: %n%1\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 2 of 20\n\n1017\r\nEVENT_SERVER_CONFIG_BACKUP\r\nThe DHCP service encountered the following error when backing up the registry configuration: %n%1\r\n1018\r\nEVENT_SERVER_DATABASE_RESTORE_FAILED\r\nThe DHCP service failed to restore the database. The following error occurred: %n%1\r\n1019\r\nEVENT_SERVER_CONFIG_RESTORE_FAILED\r\nThe DHCP service failed to restore the DHCP registry configuration. The following error occurred: %n%1\r\n1020\r\nEVENT_SERVER_LOW_ADDRESS_WARNING\r\nScope, %1, is %2 percent full with only %3 IP addresses remaining.\r\n1021\r\nEVENT_SERVER_LOAD_JET_FAILED\r\nThe DHCP service could not load the JET database library successfully.\r\n1022\r\nEVENT_SERVER_JET_CONV_REQUIRED\r\nThe DHCP service could not use the database. If this service was started for the first time after the upgrade from\r\nNT 3.51 or earlier, you need to run the utility, upg351db.exe, on the DHCP database to convert it to the new JET\r\ndatabase format. Restart the DHCP service after you have upgraded the database.\r\n1023\r\nEVENT_SERVER_JET_CONV_IN_PROGRESS\r\nThe DHCP service will now terminate because the existing database needs conversion to Windows 2000 format.\r\nThe conversion via the jetconv process, has initiated. Do not reboot or stop the jetconv process. The conversion\r\nmay take up to 10 minutes depending on the size of the database. Terminate DHCP now by clicking OK. This is\r\nrequired for the database conversion to succeed. NOTE: The DHCP service will be restarted automatically when\r\nthe conversion is completed. To check conversion status, look at the Application event log for the jetconv process.\r\n1024\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 3 of 20\n\nEVENT_SERVER_INIT_AND_READY\r\nThe DHCP service has initialized and is ready\r\n1025\r\nEVENT_SERVER_BOOT_FILE_TABLE\r\nThe DHCP service was unable to read the BOOTP file table from the registry. The DHCP service will be unable to\r\nrespond to BOOTP requests that specify the boot file name.\r\n1026\r\nEVENT_SERVER_BOOT_FILE_NAME\r\nThe DHCP service was unable to read the global BOOTP file name from the registry.\r\n1027\r\nEVENT_SERVER_AUDIT_LOG_APPEND_FAILED\r\nThe audit log file cannot be appended.\r\n1028\r\nEVENT_SERVER_INIT_AUDIT_LOG_FAILED\r\nThe DHCP service failed to initialize the audit log. The following error occurred: %n%1\r\n1029\r\nEVENT_SERVER_PING_FAILED\r\nThe DHCP service was unable to ping for a new IP address. The address was leased to the client.\r\n1030\r\nEVENT_SERVER_MOVE_AUDIT_LOG_FAILED\r\nThe audit log file could not be backed up. The following error occurred: %n%1\r\n1031\r\nEVENT_SERVER_CALLOUT_UNHANDLED_EXCEPTION\r\nThe installed server callout .dll file has caused an exception. The exception was: %n%1. The server has ignored\r\nthis exception. All further exceptions will be ignored.\r\n1032\r\nEVENT_SERVER_CALLOUT_LOAD_EXCEPTION\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 4 of 20\n\nThe installed server callout .dll file has caused an exception. The exception was: %n%1. The server has ignored\r\nthis exception and the .dll file could not be loaded.\r\n1033\r\nEVENT_SERVER_CALLOUT_LOAD_SUCCESS\r\nThe DHCP service has successfully loaded one or more callout DLLs.\r\n1034\r\nEVENT_SERVER_READ_ONLY_GROUP_ERROR\r\nThe DHCP service has failed to load one or more callout DLLs. The following error occured: %n%1\r\n1035\r\nEVENT_SERVER_READ_ONLY_GROUP_ERROR\r\nThe DHCP service was unable to create or lookup the DHCP Users local group on this computer. The error code is\r\nin the data.\r\n1036\r\nEVENT_SERVER_ADMIN_GROUP_ERROR\r\nThe DHCP server was unable to create or lookup the DHCP Administrators local group on this computer. The\r\nerror code is in the data.\r\n1037\r\nEVENT_SERVER_CLEANUP_STARTED\r\nThe DHCP service has started to clean up the database.\r\n1038\r\nEVENT_SERVER_IPCLEANUP_FINISHED\r\nThe DHCP service has cleaned up the database for unicast IP addresses -- %1 leases have been recovered and %2\r\nrecords have been removed from the database.\r\n1039\r\nEVENT_SERVER_MCASTCLEANUP_FINISHED\r\nThe DHCP service has cleaned up the database for multicast IP addresses -- %1 leases have expired (been marked\r\nfor deletion) and %2 records have been removed from the database.\r\n1040\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 5 of 20\n\nEVENT_SERVER_DATABASE_RESTORE_SUCCEEDED\r\nThe DHCP service successfully restored the database.\r\n1041\r\nDHCP_ROGUE_EVENT_NO_NETWORK\r\nThe DHCP service is not servicing any DHCPv4 clients because none of the active network interfaces have\r\nstatically configured IPv4 addresses, or there are no active interfaces.\r\n1042\r\nDHCP_ROGUE_EVENT_UNAUTHORIZED_INFO\r\nThe DHCP/BINL service running on this machine has detected a server on the network. If the server does not\r\nbelong to any domain, the domain is listed as empty. The IP address of the server is listed in parentheses. %1\r\n1043\r\nDHCP_ROGUE_EVENT_STARTED\r\nThe DHCP/BINL service on the local machine has determined that it is authorized to start. It is servicing clients\r\nnow.\r\n1044\r\nDHCP_ROGUE_EVENT_STARTED_DOMAIN\r\nThe DHCP/BINL service on the local machine, belonging to the Windows Administrative domain %2, has\r\ndetermined that it is authorized to start. It is servicing clients now.\r\n1045\r\nDHCP_ROGUE_EVENT_STOPPED\r\nThe DHCP/BINL service on the local machine has determined that it is not authorized to start. It has stopped\r\nservicing clients. The following are some possible reasons for this: %n%tThis machine belongs to a workgroup\r\nand has encountered another DHCP Server (belonging to a Windows Administrative Domain) servicing the same\r\nnetwork. %n%n%tAn unexpected network error occurred.\r\n1046\r\nDHCP_ROGUE_EVENT_STOPPED_DOMAIN\r\nThe DHCP/BINL service on the local machine, belonging to the Windows Administrative domain %2, has\r\ndetermined that it is not authorized to start. It has stopped servicing clients. The following are some possible\r\nreasons for this: %n%tThis machine is part of a directory service enterprise and is not authorized in the same\r\ndomain. (See help on the DHCP Service Management Tool for additional information). %n%n%tThis machine\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 6 of 20\n\ncannot reach its directory service enterprise and it has encountered another DHCP service on the network\r\nbelonging to a directory service enterprise on which the local machine is not authorized. %n%n%tSome\r\nunexpected network error occurred.\r\n1047\r\nDHCP_ROGUE_EVENT_JUST_UPGRADED\r\nThe DHCP/BINL service on the local machine has determined that it is authorized to start. It is servicing clients\r\nnow. %nThe DHCP/BINL service has determined that the machine was recently upgraded. If the machine is\r\nintended to belong to a directory service enterprise, the DHCP service must be authorized in the directory service\r\nfor it to start servicing clients. (See help on DHCP Service Management Tool for authorizing the server).\r\n1048\r\nDHCP_ROGUE_EVENT_JUST_UPGRADED_DOMAIN\r\nThe DHCP/BINL Service on the local machine, belonging to Windows Domain %2, has determined that it is\r\nauthorized to start. It is servicing clients now. It has determined that the computer was recently upgraded. It has\r\nalso determined that either there is no directory service enterprise for the domain or that the computer is not\r\nauthorized in the directory service. All DHCP services that belong to a directory service enterprise should be\r\nauthorized in the directory service to service clients. (See help on the DHCP Service Management Tool for\r\nauthorizing a DHCP service in the directory service).\r\n1049\r\nDHCP_ROGUE_EVENT_CANT_FIND_DOMAIN\r\nThe DHCP/BINL service on the local machine encountered an error while trying to find the domain of the local\r\nmachine. The error was: %3.\r\n1050\r\nDHCP_ROGUE_EVENT_NETWORK_FAILURE\r\nThe DHCP/BINL service on the local machine encountered a network error. The error was: %3.\r\n1051\r\nDHCP_ROGUE_EVENT_UNAUTHORIZED\r\nThe DHCP/BINL service has determined that it is not authorized to service clients on this network for the\r\nWindows domain: %2. All DHCP services that belong to a directory service enterprise must be authorized in the\r\ndirectory service to service clients. (See help on the DHCP Service Management Tool for authorizing a DHCP\r\nserver in the directory service).\r\n1052\r\nDHCP_ROGUE_EVENT_OTHER_SERVER\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 7 of 20\n\nThe DHCP/BINL service on this workgroup server has encountered another server with IP Address, %1,\r\nbelonging to the domain %2.\r\n1053\r\nDHCP_ROGUE_EVENT_SAM_OTHER_SERVER\r\nThe DHCP/BINL service has encountered another server on this network with IP Address, %1, belonging to the\r\ndomain: %2.\r\n1054\r\nDHCP_ROGUE_EVENT_SHUTDOWN\r\nThe DHCP/BINL service on this computer is shutting down. See the previous event log messages for reasons.\r\n1055\r\nDHCP_EVENT_DNS_REGPARAMS_FAILURE\r\nThe DHCP service was unable to impersonate the credentials necessary for DNS registrations: %n%1. The local\r\nsystem credentials is being used.\r\n1056\r\nDHCP_EVENT_NO_DNSCREDENTIALS_ON_DC\r\nThe DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic\r\nDNS registrations initiated by the DHCP service. This is not a recommended security configuration. Credentials\r\nfor Dynamic DNS registrations may be configured using the command line \u0026quot;netsh dhcp server set\r\ndnscredentials\u0026quot; or via the DHCP Administrative tool.\r\n1057\r\nEVENT_SERVER_DATABASE_CONVERSION\r\nThe DHCP service was unable to convert the temporary database to ESE format: %n%1.\r\n1058\r\nEVENT_SERVER_INIT_CONFIG_FAILED\r\nThe DHCP service failed to initialize its configuration parameters. The following error occurred: %n%1\r\n1059\r\nVENT_SERVER_COULDNT_SEE_DS\r\nThe DHCP service failed to see a directory server for authorization.\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 8 of 20\n\n1060\r\nEVENT_SERVER_AUDITLOG_PATH_NOT_ACCESSIBLE\r\nThe DHCP service was unable to access path specified for the audit log.\r\n1061\r\nEVENT_SERVER_BACKUP_PATH_NOT_ACCESSIBLE\r\nThe DHCP service was unable to access path specified for the database backups.\r\n1062\r\nEVENT_SERVER_DB_PATH_NOT_ACCESSIBLE\r\nThe DHCP service was unable to access path specified for the database\r\n1063\r\nEVENT_SERVER_SCOPE_FULL\r\nThere are no IP addresses available for lease in the scope or superscope \u0026quot;%1\u0026quot;.\r\n1064\r\nEVENT_SERVER_BOOTP_FULL\r\nThere are no IP addresses available for BOOTP clients in the scope or superscope \u0026quot;%1\u0026quot;.\r\n1065\r\nEVENT_SERVER_ORPHONED_ENTRIES_DELETED\r\nThere were some orphaned entries deleted in the configuration due to the deletion of a class or an option\r\ndefinition. Please recheck the server configuration.\r\n1144\r\nEVENT_SERVER_NEED_STATIC_IP\r\nThis computer has at least one dynamically assigned IP address. For reliable DHCP Server operation, you should\r\nuse only static IP addresses.\r\n1338\r\nEVENT_SERVER_OFFER_QUEUE_FULL\r\nThe number of pending DHCPOFFER messages for delayed transmission to the client has exceeded the\r\nserver\u0026apos;s capacity of 1000 pending messages. The DHCP server will drop all subsequent DHCPDISCOVER\r\nmessages for which the DHCPOFFER message response needs to be delayed as per the server configuration. The\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 9 of 20\n\nDHCP server will continue to process DHCPDISCOVER messages for which the DHCPOFFER message\r\nresponses do not need to be delayed. The DHCP server will resume processing all DHCPDISCOVER messages\r\nonce the number of pending DHCPOFFER messages for delayed transmission to the client is below the\r\nserver\u0026apos;s capacity.\r\n1339\r\nEVENT_SERVER_OFFER_QUEUE_FUNCTIONAL\r\nThe number pending DHCPOFFER messages for delayed transmission to the client is now below the\r\nserver\u0026apos;s capacity of 1000. The DHCP server will now resume processing all DHCPDISCOVER messages.\r\n1340\r\nEVENT_SERVER_DNSDHCID_FAIL\r\nThe DNS registration for DHCPv4 Client IP address %1 , FQDN %2 and DHCID %3 has been denied as there is\r\nprobably an existing client with same FQDN already registered with DNS.\r\n1341\r\nEVENT_SERVER_POLICY_RANGES_FULL\r\nThere are no IP addresses available for lease in IP address range(s) of the policy %1 in scope %2.\r\n1342\r\nEVENT_SERVER_RESIDUAL_RANGES_FULL\r\nIP address range of scope %1 is out of IP addresses.\r\n1343\r\nEVENT_SERVER_POLICY_RANGES_LOW_ADDRESS_WARNING\r\nIp address range(s) for the scope %1 policy %2 is %3 percent full with only %4 IP addresses available .\r\n1344\r\nEVENT_SERVER_DNS_VALIDATION_FAILED\r\nThe DNS IP Address %1 is not a valid DNS Server Address.\r\n1376\r\nEVENT_SERVER_RESIDUAL_RANGES_LOW_ADDRESS_WARNING\r\nIP address range of scope %1 is %2 percent full with only %3 IP addresses available.\r\n1377\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 10 of 20\n\nEVENT_SERVER_SUPERSCOPE_LOW_ADDRESS_WARNING\r\nSuperScope, %1, is %2 percent full with only %3 IP addresses remaining. This superscope has the following\r\nscopes %4\r\n10000\r\nEVENT_DHCPV6_ADDERESS_NACKED\r\nDHCPv6 confirmation has been declined because the address was not appropriate to the link or DHCPv6 renew\r\nrequest has a Zero lifetime for Client Address %1.\r\n10001\r\nEVENT_DHCPV6_REQUEST_RECEIVED_FOR_ADDRESSES_NOT_LEASED\r\nRenew, rebind or confirm received for IPv6 addresses %1 for which there are no active lease available.\r\n10002\r\nEVENT_DHCPV6_SERVER_UNKNOWN_OPTION\r\nDHCPv6 service received the unknown option %1, with a length of %2. The raw option data is given below.\r\n10003\r\nEVENT_DHCPV6_SERVER_SCOPE_FULL\r\nThere are no IPv6 addresses available to lease in the scope serving the network with Prefix %1.\r\n10004\r\nEVENT_DHCPV6_SERVER_LEASE_DECLINED\r\nThe DHCPv6 client, %2, declined the address %1.\r\n10005\r\nEVENT_DHCPV6_SERVER_LOW_ADDRESS_WARNING\r\nDHCPv6 Scope serving the network with prefix %1, is %2 percent full with only %3 IP addresses remaining.\r\n10006\r\nEVENT_DHCPV6_CLIENT_DELETE\r\nA DHCPV6 client %1 has been deleted from DHCPV6 database.\r\n10007\r\nEVENT_DHCPV6_DROP_TIMEOUT\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 11 of 20\n\nA DHCPV6 message that was in the queue for more than 30 seconds has been dropped because it is too old to\r\nprocess.\r\n10008\r\nEVENT_DHCPV6_DROP_INVALID\r\nAn invalid DHCPV6 message has been dropped.\r\n10009\r\nEVENT_DHCPV6_DROP_WRONG_SERVER\r\nA DHCPV6 message that was not meant for this server has been dropped.\r\n10010\r\nEVENT_DHCPV6_DROP_UNICAST\r\nDHCV6 message has been dropped because it was received on a Uni-cast address and unicast support is disabled\r\non the server.\r\n10011\r\nEVENT_DHCPV6_SERVER_AUDIT_LOG_APPEND_FAILED\r\nDHCPV6 audit log file cannot be appended, Error Code returned %1.\r\n10012\r\nEVENT_DHCPV6_DROP_UNAUTH\r\nA DHCPV6 message has been dropped because the server is not authorized to process the message.\r\n10013\r\nEVENT_DHCPv6_SERVER_INIT_AUDIT_LOG_FAILED\r\nThe DHCPv6 service failed to initialize the audit log. The following error occurred: %n%1\r\n10014\r\nEVENT_DHCPV6_SERVER_MOVE_AUDIT_LOG_FAILED\r\nDHCPv6 audit log file could not be backed up. Error code %1\r\n10015\r\nEVENT_DHCPV6_SERVER_AUDITLOG_PATH_NOT_ACCESSIBLE\r\nThe DHCPv6 service was unable to access path specified for the audit log.\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 12 of 20\n\n10016\r\nEVENT_DHCPV6_SERVER_INIT_WINSOCK_FAILED\r\nThe DHCPv6 service failed to initialize Winsock startup. The following error occurred %1.\r\n10017\r\nEVENT_DHCPV6_NO_DNSCREDENTIALS_ON_DC\r\nThe DHCPv6 service has detected that it is running on a DC and has no credentials configured for use with\r\nDynamic DNS registrations initiated by the DHCPv6 service. This is not a recommended security configuration.\r\n10018\r\nEVENT_DHCPV6_SERVER_INTERFACE_NOTIFICATION\r\nThe DHCPv6 Server failed to receive a notification of interface list changes. Some of the interfaces will not be\r\nenabled in the DHCPv6 service.\r\n10019\r\nEVENT_DHCPV6_SERVER_INIT_CONFIG_FAILED\r\nThe DHCPv6 service failed to initialize its configuration parameters. The following error occurred: %n%1.\r\n10020\r\nEVENT_DHCPV6_SERVER_NEED_STATIC_IP\r\nThis computer has at least one dynamically assigned IPv6 address. For reliable DHCPv6 server operation, you\r\nshould use only static IPv6 addresses.\r\n10021\r\nEVENT_DHCPV6_SERVER_INIT_DATABASE_FAILED\r\nDHCPv6 service failed to initialize the database. The following error occurred: %n%1.\r\n10022\r\nEVENT_DHCPV6_SERVER_INIT_AND_READY\r\nThe DHCPv6 service has initialized and is ready to serve.\r\n10023\r\nEVENT_DHCPV6_PORT_UNAVAILABLE\r\nDHCPv6 Server is unable to bind to UDP port number %1 as it is used by another application. This port must be\r\nmade available to DHCPv6 Server to start servicing the clients.\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 13 of 20\n\n10024\r\nERROR_LAST_DHCPV6_SERVER_ERROR\r\nERROR_LAST_DHCPV6_SERVER_ERROR\r\n10025\r\nEVENT_DHCPV6_DNSDHCID_FAIL\r\nThe DNS registration for DHCPv6 Client IPv6 address %1, FQDN %2 and DHCID %3 has been denied as there\r\nis probably an existing client with same FQDN already registered with DNS.\r\n20090\r\nEVENT_DHCP_PORT_UNAVAILABLE\r\nDHCP Server is unable to bind to UDP port number %1 as it is used by another application. This port must be\r\nmade available to DHCP Server to start servicing the clients.\r\n20098\r\nEVENT_FILTER_EMPTY_ALLOW_LIST\r\nNo DHCP clients are being served, as the Allow list is empty and the server was configured to provide DHCP\r\nservices, to clients whose hardware addresses are present in the Allow List.\r\n20251\r\nDHCPv4.ChangeFailoverRelationState\r\nThe failover state of server: %1 for failover relationship: %2 changed from: %3 to %4.\r\n20252\r\nDHCPv4.ChangeFailoverRelationStateError\r\nThe failover state of server: %1 for failover relationship: %2 changed from: %3 to %4.\r\n20253\r\nDHCPv4.FailoverServerTimeSync\r\nThe server detected that it is out of time synchronization with partner server: %1 for failover relationship: %2. The\r\ntime is out of sync by: %3 seconds .\r\n20254\r\nDHCPv4.FailoverCommUp\r\nServer has established contact with failover partner server %1 for relationship %2 .\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 14 of 20\n\n20255\r\nDHCPv4.FailoverCommDown\r\nServer has lost contact with failover partner server %1 for relationship %2 .\r\n20256\r\nDHCPv4.AuthFailedBndUpdMsgDigestFailedToCompare\r\nFailover protocol message BINDING-UPDATE from server %1 for failover relationship %2 was rejected because\r\nmessage digest failed to compare.\r\n20257\r\nDHCPv4.AuthFailedBndUpdMsgDigestNotConfigured\r\nFailover protocol message BINDING-UPDATE from server %1 for failover relationship %2 was rejected because\r\nmessage digest was not configured.\r\n20258\r\nDHCPv4.AuthFailedBndUpdMsgDigestNotPresent\r\nFailover protocol message BINDING-UPDATE from server %1 for failover relationship %2 is rejected because\r\nmessage digest was not present.\r\n20259\r\nDHCPv4.ChangeFailoverRelationStateNoPrevState\r\nThe failover state of server: %1 for failover relationship: %2 changed to : %3.\r\n20260\r\nDHCPv4.ChangeFailoverRelationStateErrorNoPrevState\r\nThe failover state of server: %1 for failover relationship: %2 changed to: %3.\r\n20261\r\nDHCPv4.AuthFailedBndAckMsgDigestFailedToCompare\r\nFailover protocol message BINDING-ACK from server %1 for failover relationship %2 was rejected because\r\nmessage digest failed to compare.\r\n20262\r\nDHCPv4.AuthFailedBndAckMsgDigestNotConfigured\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 15 of 20\n\nFailover protocol message BINDING-ACK from server %1 for failover relationship %2 was rejected because\r\nmessage digest was not configured.\r\n20263\r\nDHCPv4.AuthFailedBndAckMsgDigestNotPresent\r\nFailover protocol message BINDING-ACK from server %1 for failover relationship %2 is rejected because\r\nmessage digest was not present.\r\n20264\r\nDHCPv4.AuthFailedConnectMsgDigestFailedToCompare\r\nFailover protocol message CONNECT from server %1 for failover relationship %2 was rejected because message\r\ndigest failed to compare.\r\n20265\r\nDHCPv4.AuthFailedConnectMsgDigestNotConfigured\r\nFailover protocol message CONNECT from server %1 for failover relationship %2 was rejected because message\r\ndigest was not configured.\r\n20266\r\nDHCPv4.AuthFailedConnectMsgDigestNotPresent\r\nFailover protocol message CONNECT from server %1 for failover relationship %2 is rejected because message\r\ndigest was not present.\r\n20267\r\nDHCPv4.AuthFailedConnectAckMsgDigestFailedToCompare\r\nFailover protocol message CONNECTACK from server %1 for failover relationship %2 was rejected because\r\nmessage digest failed to compare.\r\n20268\r\nDHCPv4.AuthFailedConnectAckMsgDigestNotConfigured\r\nFailover protocol message CONNECTACK from server %1 for failover relationship %2 was rejected because\r\nmessage digest was not configured.\r\n20269\r\nDHCPv4.AuthFailedConnectAckMsgDigestNotPresent\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 16 of 20\n\nFailover protocol message CONNECTACK from server %1 for failover relationship %2 is rejected because\r\nmessage digest was not present.\r\n20270\r\nDHCPv4.AuthFailedUpdReqAllMsgDigestFailedToCompare\r\nFailover protocol message UPDREQALL from server %1 for failover relationship %2 was rejected because\r\nmessage digest failed to compare.\r\n20271\r\nDHCPv4.AuthFailedUpdReqAllMsgDigestNotConfigured\r\nFailover protocol message UPDREQALL from server %1 for failover relationship %2 was rejected because\r\nmessage digest was not configured.\r\n20272\r\nDHCPv4.AuthFailedUpdReqAllMsgDigestNotPresent\r\nFailover protocol message UPDREQALL from server %1 for failover relationship %2 is rejected because message\r\ndigest was not present.\r\n20273\r\nDHCPv4.AuthFailedUpdDoneMsgDigestFailedToCompare\r\nFailover protocol message UPDDONE from server %1 for failover relationship %2 was rejected because message\r\ndigest failed to compare.\r\n20274\r\nDHCPv4.AuthFailedUpdDoneMsgDigestNotConfigured\r\nFailover protocol message UPDDONE from server %1 for failover relationship %2 was rejected because message\r\ndigest was not configured.\r\n20275\r\nDHCPv4.AuthFailedUpdDoneMsgDigestNotPresent\r\nFailover protocol message UPDDONE from server %1 for failover relationship %2 is rejected because message\r\ndigest was not present.\r\n20276\r\nDHCPv4.AuthFailedUpdReqMsgDigestFailedToCompare\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 17 of 20\n\nFailover protocol message UPDREQ from server %1 for failover relationship %2 was rejected because message\r\ndigest failed to compare.\r\n20277\r\nDHCPv4.AuthFailedUpdReqMsgDigestNotConfigured\r\nFailover protocol message UPDREQ from server %1 for failover relationship %2 was rejected because message\r\ndigest was not configured.\r\n20278\r\nDHCPv4.AuthFailedUpdReqMsgDigestNotPresent\r\nFailover protocol message UPDREQ from server %1 for failover relationship %2 is rejected because message\r\ndigest was not present.\r\n20279\r\nDHCPv4.AuthFailedStateMsgDigestFailedToCompare\r\nFailover protocol message STATE from server %1 for failover relationship %2 was rejected because message\r\ndigest failed to compare.\r\n20280\r\nDHCPv4.AuthFailedStateMsgDigestNotConfigured\r\nFailover protocol message STATE from server %1 for failover relationship %2 was rejected because message\r\ndigest was not configured.\r\n20281\r\nDHCPv4.AuthFailedStateMsgDigestNotPresent\r\nFailover protocol message STATE from server %1 for failover relationship %2 is rejected because message digest\r\nwas not present.\r\n20282\r\nDHCPv4.AuthFailedContactMsgDigestFailedToCompare\r\nFailover protocol message CONTACT from server %1 for failover relationship %2 was rejected because message\r\ndigest failed to compare.\r\n20283\r\nDHCPv4.AuthFailedContactMsgDigestNotConfigured\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 18 of 20\n\nFailover protocol message CONTACT from server %1 for failover relationship %2 was rejected because message\r\ndigest was not configured.\r\n20284\r\nDHCPv4.AuthFailedContactMsgDigestNotPresent\r\nFailover protocol message CONTACT from server %1 for failover relationship %2 is rejected because message\r\ndigest was not present.\r\n20285\r\nDHCPv4.InvalidAlgorithmProvider\r\nAn invalid cryptographic algorithm %1 was specified for failover message authentication in\r\nFailoverCryptoAlgorithm under registry key\r\nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\DHCPServer\\Parameters\\Failover. The\r\noperation is halted.\r\n20286\r\nDHCPv4.FailoverClientLeaseDropped\r\nBINDING UPDATE message for IP address %1 could not be replicated to the partner server %2 of failover\r\nrelation %3 as the internal BINDING UPDATE queue is full.\r\n20287\r\nDHCPv4.ClientRequestDropped\r\nDHCP client request from %1 was dropped since the applicable IP address ranges in scope/superscope %2 are out\r\nof available IP addresses. This could be because of IP address ranges of a policy being out of available IP\r\naddresses.\r\n20291\r\nDHCPv4.SendBndAckMessageRejectReason\r\nA BINDING-ACK message with transaction id: %1 was sent for IP address: %2 with reject reason: (%3) to\r\npartner server: %4 for failover relationship: %5.\r\n20292\r\nDHCPv4.RecvBndAckMessageRejectReason\r\nA BINDING-ACK message with transaction id: %1 was received for IP address: %2 with reject reason: (%3 )\r\nfrom partner server: %4 for failover relationship: %5.\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 19 of 20\n\nSource: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nhttps://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)\r\nPage 20 of 20",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800668(v=ws.11)"
	],
	"report_names": [
		"dn800668(v=ws.11)"
	],
	"threat_actors": [],
	"ts_created_at": 1775434283,
	"ts_updated_at": 1775791238,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/1f0b2d7a4910bdc31f3d1df544a75127dc2408f1.pdf",
		"text": "https://archive.orkl.eu/1f0b2d7a4910bdc31f3d1df544a75127dc2408f1.txt",
		"img": "https://archive.orkl.eu/1f0b2d7a4910bdc31f3d1df544a75127dc2408f1.jpg"
	}
}