DHCP: The server should have Full Control permissions to the backup directory

  • Article

Applies To: Windows Server 2008 R2, Windows Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Dynamic Host Configuration Protocol Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer (https://go.microsoft.com/fwlink/?LinkId=122786).

Operating System

Windows Server 2008 R2, Windows Server 2012

Product/Feature

Dynamic Host Configuration Protocol (DHCP)

Severity

Error

Category

Prerequisite

Issue

The configured backup directory does not exist or the DHCP server does not have full control permissions to the backup directory

Impact

The DHCP server will not be able to make periodic backups of the database if it cannot access to the backup directory.

Resolution

Create the backup directory path if it does not exist and assign the DHCP server full control permissions.

Maintaining a backup of the DHCP database protects you from data loss in the event of data corruption or a hard disk failure. DHCP must have full control permissions to the directory where the DHCP backup files are located.

To change permissions, you must be the owner or have been granted permission by the owner to do so.

To give DHCP full control permissions to its backup directory

  1. Click Start, click Run…, type system32 and then click OK.

  2. (Optional) If there is no DHCP directory, right-click New, click Folder type DHCP and then press ENTER.

  3. Click DHCP, click Properties and then click Security.

  4. In Group or User names click DHCPServer if a DHCP Server is already present. Otherwise, click Add in Select Users or Groups.

  5. Click Locations and select the hostname of the system, enter NT Service\DHCPServer, and then, click OK.

  6. In Permissions for DHCPServer check Allow for Full control and then click OK.

Additional references

For updated detailed IT pro information about DHCP and selectively enabling or disabling DHCP server bindings, see the Windows Server 2008 R2 documentation on the Microsoft TechNet Web site.