Dynamic Host Configuration Protocol (DHCP) provides an automated mechanism to assign IP addresses to the network clients. In Windows Server, it is a server role that can be added using Server Manager.
An administrator can use the following tasks in their checklist when considering a DHCP server security method:
Operating system type: Use the Windows Server Core operating system
DHCP server roles: Remove unwanted roles and features from the DHCP server
Baseline security: Create and implement DHCP server baseline security
Exclusion and reservation: Create a proper exclusion and reservation range
Administration: Restrict DHCP administration access
Access policy: Configure policy-based access
The details of these tasks are included in the following sections.