| Event Id | 1056 |
| Source | Microsoft-Windows-DHCP-Server |
| Description | The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service. This is not a recommended security configuration. Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool. |
| Event Information | According to Microsoft : Cause : This event is logged when the DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service. Resolution : Configure impersonation credentials for dynamic updates To perform these procedures, you must be a member of the Administrators group, or you must have been delegated the appropriate authority. You can configure the DHCP Server service to impersonate an account to perform DNS registrations. The Netsh.exe tool can be used to configure the impersonation credentials. 1.Click Start, click Control Panel, and then click User Accounts. 2.Click Manage user accounts. 3.Click Add, and then follow the instructions to create a new user account. 4.Click Start, type cmd in Start Search, and then press ENTER. 5.At the command prompt, type netsh dhcp server set dnscredentials username domainname password 6.At the DHCP server computer, click Start, click Run, type services.msc, and then click OK. 7.Double-click DHCP Server. 8.Click Stop, wait for the progress bar to complete, click Start, wait for the progress bar to complete, and then click OK. 9.On the File menu, click Exit. 10.Type netshdhcp server delete dnscredentials dhcpfullforce, and then press ENTER. 11.At the DHCP server computer, click Start, click Run, type services.msc, and then click OK. 12.Double-click DHCP Server. 13.Click Start, wait for the progress bar to complete, and then click OK. 14.On the File menu, click Exit. Verify To determine which credentials are being used: 1.At the DHCP server computer, click Start, click Run, type cmd, and then press ENTER. 2.Type netsh dhcp server show dnscredentials. 3.The output of this command displays the credentials being used. |
| Reference Links | Event ID 1056 from Source Microsoft-Windows-DHCP-Server |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.