The DHCP clients may not obtain the configuration script when you use DHCP Option 252 to automatically configure Internet Explorer

When you use Dynamic Host Configuration Protocol (DHCP) Option 252 to automatically configure Microsoft Internet Explorer by using a Wpad.dat file, the DHCP clients may not obtain the configuration script.

This behavior occurs when all the following conditions are true:

• The DHCP client and the DHCP server belong to different subnets.
• The DHCP relay agent is configured on a computer that is running Microsoft Windows Server 2003.
• Microsoft Internet Security and Acceleration (ISA) Server 2004 and the DHCP relay agent are both running on the same computer.
• The virtual private network (VPN) configuration is not enabled on the computer that is running ISA Server.

When all these conditions are true, ISA Server takes control on the server that is running the Routing and Remote Access service. Then, ISA Server stops the Routing and Remote Access service. Therefore, no DHCP relay agent is running on the network segment, and Internet Explorer cannot find its configuration script.

This behavior occurs because the VPN Client access option is not enabled in ISA Server. By default, ISA Server controls the Routing and Remote Access service. If the VPN Client access option is not enabled in ISA Server, the Routing and Remote Access service does not start. When the Routing and Remote Access service does not start, the DHCP datagrams are not relayed to the DHCP server.

To resolve this behavior, use one of the following methods:

• Use a DHCP relay agent on the default gateway for the subnet. Then, remove the DHCP relay agent from the computer that is running ISA Server.
• Use a DHCP relay agent on a computer that is not running ISA Server. Then, remove the DHCP relay agent from the computer that is running ISA Server.
• If you have to use the DHCP relay agent and ISA Server at the same time, enable the VPN Client access option on the computer that is running ISA Server. This prevents ISA Server from stopping Routing and Remote Access.

This behavior is by design.

After you install and then configure the DHCP relay agent on a computer that is running Windows Server 2003 and then install ISA Server, the DHCP relay agent configuration is reset to the default values. You can use the Netsh utility to dump the DHCP relay agent configuration before you install ISA Server. You can then reapply the DHCP relay agent configuration after you finish installing ISA Server.

To dump the DHCP relay agent configuration by using the Netsh utility, type the following command at the command prompt:
The following is sample output of this command: For more information about the Netsh utility, visit the following Microsoft Web site: For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base: For more information about how to configure the DHCP relay agent in ISA Server, visit the following Microsoft Web site: