Windows Server 2022 – DHCP authorization lost in Active Directory – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

DHCP service runs but does not lease addresses because AD authorization is missing or invalid.

Environment & Reproduction

Appears after host rename, AD object cleanup, or delegated rights changes.

Get-Service DHCPServer
Get-DhcpServerInDC
Get-WinEvent -LogName System -MaxEvents 20

Root Cause Analysis

Server object mismatch in AD or permissions removal blocks authorized DHCP operation.

Quick Triage

Compare local server identity with AD authorized list.

hostname
Get-DhcpServerInDC
Test-ComputerSecureChannel -Verbose

Step-by-Step Diagnosis

Validate DNS registration, machine account trust, and DHCP authorization object integrity.

Resolve-DnsName $env:COMPUTERNAME
Get-ADComputer $env:COMPUTERNAME
Get-DhcpServerInDC

Solution – Primary Fix

Re-authorize DHCP server in AD and restart service.

Add-DhcpServerInDC -DnsName dhcp01.corp.local -IPAddress 10.0.0.30
Restart-Service DHCPServer
Get-DhcpServerInDC

Solution – Alternative Approaches

Remove stale authorization object and add fresh entry.

Remove-DhcpServerInDC -DnsName dhcp01-old.corp.local -IPAddress 10.0.0.30 -Force
Add-DhcpServerInDC -DnsName dhcp01.corp.local -IPAddress 10.0.0.30

Verification & Acceptance Criteria

Server appears authorized and clients receive leases normally.

Get-DhcpServerInDC
Get-DhcpServerv4Statistics
ipconfig /renew

Rollback Plan

Reinstate previous authorized server entries if migration sequence was premature.

Add-DhcpServerInDC -DnsName dhcp01-old.corp.local -IPAddress 10.0.0.30

Prevention & Hardening

Embed authorization checks into post-change validation and host lifecycle runbooks.

Get-DhcpServerInDC | Export-Csv dhcp-authorized-servers.csv -NoTypeInformation

Related Errors & Cross-Refs

Often paired with secure channel breaks and DNS stale records after host renames.

Related tutorial: View the step-by-step tutorial for Windows Server 2022.

View all Windows Server 2022 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Microsoft Learn: DHCP authorization in AD DS and delegated DHCP administration.