JSI Tip 9155. When you upgrade a Windows 2000 domain controller to Windows Server 2003, the DHCP client service does NOT start?

Your upgraded server System event log contains:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: MM/DD/YYYY
Time: HH:MM:SS
User: N/A
Computer:
Description: The DHCP Client service terminated with the following error: Access is denied.

When you attempt to start the DHCP client service manually, you receive:

Could not start the DCHP Client service on Local Computer.
Error 5: Access is denied.

This behavior occurs because the Network Service account does not have sufficient permissions on the following keys:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDhcp
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpip

To correct this problem, use the Corrected version of SubInAcl and type the following commands in a CMD.EXE window:

subinacl /keyreg HKEY_LOCAL_MACHINESystemCurrentControlSetServicesDHCP /grant="NT AUTHORITYNetworkService"=F
subinacl /keyreg HKEY_LOCAL_MACHINESystemCurrentControlSetServicesTCPIP /grant="NT AUTHORITYNetworkService"=F

NOTE: You can perform this remotely by pre-pending \ to each command.