JSI Tip 9155. When you upgrade a Windows 2000 domain controller to Windows Server 2003, the DHCP client service does NOT start?

Your upgraded server System event log contains:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Time: HH:MM:SS
User: N/A
Computer: <ServerName>
Description: The DHCP Client service terminated with the following error: Access is denied.

When you attempt to start the DHCP client service manually, you receive:

Could not start the DCHP Client service on Local Computer.
Error 5: Access is denied.

This behavior occurs because the Network Service account does not have sufficient permissions on the following keys:


To correct this problem, use the Corrected version of SubInAcl and type the following commands in a CMD.EXE window:

subinacl /keyreg HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCP /grant="NT AUTHORITY\NetworkService"=F
subinacl /keyreg HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP /grant="NT AUTHORITY\NetworkService"=F

NOTE: You can perform this remotely by pre-pending \\<ServerName>\ to each command.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.