locked
ERROR 50015 - DHCP CLIENT - Nack is received on the interface 0 RRS feed

  • Question

  • EVENT 50015:  I am getting an event log at least one every 30 seconds.  I have been unable to find any information that would lead me to resolving whatever this issue is:

    Currently the server is setup as a DHCP Client, but it has not clients.  This is a new startup in every since of the word. Right now the only thing the server has on it is an outward facing website.   

    Could anyone offer suggestions on how to trace and or resolve this error?

    Log Name:      Microsoft-Windows-Dhcp-Client/Admin
    Source:        Microsoft-Windows-Dhcp-Client
    Date:          3/11/2016 5:59:29 AM
    Event ID:      50015
    Task Category: Protocol State Event
    Level:         Error
    Keywords:      
    User:          SYSTEM
    Computer:      DC01GDS.Globaldatashare.com
    Description:
    Nack is received on the interface 0
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
        <EventID>50015</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>24</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2016-03-11T10:59:29.971603700Z" />
        <EventRecordID>32149</EventRecordID>
        <Correlation />
        <Execution ProcessID="968" ThreadID="9052" />
        <Channel>Microsoft-Windows-Dhcp-Client/Admin</Channel>
        <Computer>DC01GDS.XXXXX.com</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="InterfaceId">0</Data>
      </EventData>
    </Event>


    Thank you, Chris

    Friday, March 11, 2016 11:19 AM

Answers

  • Hi

     Event 50015 ; Nack means Not Acknowledged,  in other words,  the computer requested the DHCP server to confirm the IP address that it already has (to "acknowledge it") but the DHCP server declined. It could be that the IP address requested is not in the DHCP scope anymore or it has already been assigned to another computer. In "normal" computer operation this is a benign message and the network adapter should be able to obtain another IP address from the DHCP server. If this message keeps repeating then there is a problem either with the computer itself,  the network (i.e. rogue DHCP servers) or with the DHCP server.

     Also you should check this similar case to yours,

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/208c9257-d36b-412b-a525-3e51dde57507/event-id-50015-on-a-windows-2008-server?forum=winserverNAP


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Friday, March 11, 2016 3:48 PM