How to Install and Authorize a DHCP Server in Active Directory
Applies to: Windows Server 2019, 2022 and 2025.
An AD domain DHCP server must be authorized before leasing addresses. Install the role only after defining scope ownership and redundancy.
DNS and DHCP changes can interrupt authentication and remote access. Preserve console access, export current settings and test from representative clients. Managed Windows VPS services are available at networkmanager.info.
Prerequisites
- Assign a static server address.
- Confirm no competing DHCP service exists.
- Use Enterprise Admin or delegated authorization rights.
- Plan scopes, exclusions and failover.
Procedure
Step 1: Install the role
Add DHCP and management tools.
Install-WindowsFeature DHCP -IncludeManagementToolsStep 2: Authorize in AD
Use the server FQDN and static address.
Add-DhcpServerInDC -DnsName 'dhcp01.corp.example' -IPAddress '192.0.2.21'Step 3: Create security groups
Complete post-install security-group configuration.
netsh dhcp add securitygroupsStep 4: Restart service
Apply group membership.
Restart-Service DHCPServerStep 5: Review authorization
List authorized servers.
Get-DhcpServerInDCVerification
The server should be authorized and service running without rogue-server events.
Get-DhcpServerInDC
Get-Service DHCPServer
Get-WinEvent -LogName 'Microsoft-Windows-DHCP Server Events/Admin' -MaxEvents 30Rollback
Remove authorization with Remove-DhcpServerInDC before uninstalling the role. Do not remove a server still serving production scopes.
Operational notes
Authorization applies to domain environments; network equipment must also relay client broadcasts where subnets are remote.
