Dynamic Host Configuration Protocol
Dynamic Host Configuration Protocol (DHCP) provides an automated mechanism to assign IP addresses to the network clients. In Windows Server, it is a server role that can be added using Server Manager.
An administrator can use the following tasks in their checklist when considering a DHCP server security method:
- Operating system type: Use the Windows Server Core operating system
- DHCP server roles: Remove unwanted roles and features from the DHCP server
- Baseline security: Create and implement DHCP server baseline security
- Exclusion and reservation: Create a proper exclusion and reservation range
- Administration: Restrict DHCP administration access
- Access policy: Configure policy-based access
The details of these tasks are included in the following sections.
Applying a DHCP baseline policy
Like with the other services, I will again start with baseline policies. These baseline policies are included in Microsoft SCM, as shown in the following screenshot. The details...