DHCP: The server should have Full Control permissions to the database directory
Applies To: Windows Server 2008 R2, Windows Server 2012
This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Dynamic Host Configuration Protocol Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer (https://go.microsoft.com/fwlink/?LinkId=122786).
Operating System |
Windows Server 2008 R2, Windows Server 2012 |
Product/Feature |
Dynamic Host Configuration Protocol (DHCP) |
Severity |
Error |
Category |
Prerequisite |
Issue
The configured database directory does not exist or the DHCP server does not have full control permissions to the database directory.
Impact
The DHCP server will not work if it cannot access the database directory.
Resolution
Create the database directory path if it does not exist and assign the DHCP server full control permissions.
The DHCP service database is a dynamic database that is updated as DHCP clients are assigned or as they release their TCP/IP configuration parameters. If the DHCP server does not have full control permissions to the database it will not issue leases to clients. The default location of the DHCP server database file (Dhcp.mdb) is in the %SystemRoot%\System32\Dhcp folder, with a backup copy of the same file.
To change permissions, you must be the owner or have been granted permission by the owner to do so.
To give DHCP full control permissions to its database directory
Click Start, click Run…, type system32 and then click OK.
(Optional) If there is no DHCP directory, right-click New, click Folder type DHCP and then press ENTER.
Click DHCP, click Properties and then click Security.
In Group or User names click DHCPServer if a DHCP Server is already present. Otherwise, click Add in Select Users or Groups.
Click Locations and select the hostname of the system, enter NT Service\DHCPServer, and then, click OK.
In Permissions for DHCPServer check Allow for Full control and then click OK.
Additional references
For updated detailed IT pro information about DHCP and selectively enabling or disabling DHCP server bindings, see the Windows Server 2008 R2 documentation on the Microsoft TechNet Web site.