DHCP: The server should have Full Control permissions to the DHCP registry parameters

Applies To: Windows Server 2008 R2, Windows Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Dynamic Host Configuration Protocol Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer (https://go.microsoft.com/fwlink/?LinkId=122786).

Issue

The DHCP server does not have full control permissions to the DHCP registry parameters.

Impact

The DHCP server will not be able to read or write to its registry configuration and will not start.

Resolution

Assign the DHCPServer service full control permissions to the DHCP registry.

To give DHCPServer service full control permissions to the DHCP registry

1. Click Start, type regedit in Start Search, click Yes in User Account Control if prompted, and then press ENTER.

2. In the registry tree, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\DHCPServer.

3. Right-click DHCPServer and then click Permissions.

4. In Group or User names click DHCPServer if a DHCP Server is already present. Otherwise, click Add in Select Users or Groups.

5. Click Locations and select the hostname of the system, enter NT Service\DHCPServer, and then, click OK.

6. In Permissions for DHCP Server check Allow for Full control and then click OK.

Additional references

For updated detailed IT pro information about DHCP and selectively enabling or disabling DHCP server bindings, see the Windows Server 2008 R2 documentation on the Microsoft TechNet Web site.