{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
        "slug": "dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range",
        "url": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/"
        },
        "title": "Plan exclusions within a DHCP scope before activating its address range",
        "summary": "How should a DHCP scope represent a subnet with addresses that must not be leased?",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "network-infrastructure",
            "label": "Networks & infrastructure",
            "alt": "Resilient network core with engineered blue and gold data paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            },
            {
                "slug": "networks-infrastructure",
                "name": "Networks & Infrastructure",
                "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-08T18:15:40+00:00",
        "modified_at": "2026-09-08T18:20:22+00:00",
        "reviewed_on": "2026-09-08",
        "reading_minutes": 1,
        "word_count": 207,
        "potentially_affected": "Administrators planning Windows Server DHCP scopes and exclusions.",
        "dse_recommendation": "Prepare an address worksheet showing the overall scope and every intended exclusion.",
        "primary_source": {
            "name": "DHCP scopes in Windows Server",
            "url": "https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-scopes",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>A DHCP scope groups addresses that a server can lease to clients on a subnet. Microsoft describes a single scope as an address range together with its configuration options. The Windows Server guidance permits one scope for a subnet, defined as one continuous address range. Administrators needing several usable ranges inside that subnet define the scope first and then add exclusion ranges. <a href=\"https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-scopes\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft documentation</a>.</p>\n<h2>Applicability</h2>\n<p>Identify the subnet, proposed pool, existing address allocations, and reservations or exclusions already recorded. Review the addressing plan before enabling the scope, and ask the network owner to resolve conflicting inventory entries.</p>\n<h2>DSE recommendation</h2>\n<p>Prepare an address worksheet showing the overall scope and every intended exclusion. Name the owner of each address block and the reason it is excluded. Have a second reviewer compare the worksheet with the planned configuration and confirm the intended gateway and DNS options separately.</p>\n<h2>Verification</h2>\n<p>Use an approved client test to inspect the assigned address and options. Compare the server’s configured range and exclusions with the worksheet, then reconcile observed leases with the intended eligible addresses. Preserve any unexpected allocation as a finding for investigation before extending the scope to additional clients.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-scopes\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: DHCP scopes in Windows Server</a>. Source reviewed September 8, 2026.</p>",
        "content_text": "Source facts\nA DHCP scope groups addresses that a server can lease to clients on a subnet. Microsoft describes a single scope as an address range together with its configuration options. The Windows Server guidance permits one scope for a subnet, defined as one continuous address range. Administrators needing several usable ranges inside that subnet define the scope first and then add exclusion ranges. Microsoft documentation.\nApplicability\nIdentify the subnet, proposed pool, existing address allocations, and reservations or exclusions already recorded. Review the addressing plan before enabling the scope, and ask the network owner to resolve conflicting inventory entries.\nDSE recommendation\nPrepare an address worksheet showing the overall scope and every intended exclusion. Name the owner of each address block and the reason it is excluded. Have a second reviewer compare the worksheet with the planned configuration and confirm the intended gateway and DNS options separately.\nVerification\nUse an approved client test to inspect the assigned address and options. Compare the server’s configured range and exclusions with the worksheet, then reconcile observed leases with the intended eligible addresses. Preserve any unexpected allocation as a finding for investigation before extending the scope to additional clients.\nOfficial references\nMicrosoft Learn: DHCP scopes in Windows Server. Source reviewed September 8, 2026.",
        "content_markdown": "## Source facts\n\nA DHCP scope groups addresses that a server can lease to clients on a subnet. Microsoft describes a single scope as an address range together with its configuration options. The Windows Server guidance permits one scope for a subnet, defined as one continuous address range. Administrators needing several usable ranges inside that subnet define the scope first and then add exclusion ranges. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-scopes).\n\n## Applicability\n\nIdentify the subnet, proposed pool, existing address allocations, and reservations or exclusions already recorded. Review the addressing plan before enabling the scope, and ask the network owner to resolve conflicting inventory entries.\n\n## DSE recommendation\n\nPrepare an address worksheet showing the overall scope and every intended exclusion. Name the owner of each address block and the reason it is excluded. Have a second reviewer compare the worksheet with the planned configuration and confirm the intended gateway and DNS options separately.\n\n## Verification\n\nUse an approved client test to inspect the assigned address and options. Compare the server’s configured range and exclusions with the worksheet, then reconcile observed leases with the intended eligible addresses. Preserve any unexpected allocation as a finding for investigation before extending the scope to additional clients.\n\n## Official references\n\n[Microsoft Learn: DHCP scopes in Windows Server](https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-scopes). Source reviewed September 8, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
                "url": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-08"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Plan exclusions within a DHCP scope before activating its address range",
                        "item": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
                "url": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/",
                "headline": "Plan exclusions within a DHCP scope before activating its address range",
                "description": "How should a DHCP scope represent a subnet with addresses that must not be leased?",
                "abstract": "How should a DHCP scope represent a subnet with addresses that must not be leased?",
                "articleBody": "Source facts\nA DHCP scope groups addresses that a server can lease to clients on a subnet. Microsoft describes a single scope as an address range together with its configuration options. The Windows Server guidance permits one scope for a subnet, defined as one continuous address range. Administrators needing several usable ranges inside that subnet define the scope first and then add exclusion ranges. Microsoft documentation.\nApplicability\nIdentify the subnet, proposed pool, existing address allocations, and reservations or exclusions already recorded. Review the addressing plan before enabling the scope, and ask the network owner to resolve conflicting inventory entries.\nDSE recommendation\nPrepare an address worksheet showing the overall scope and every intended exclusion. Name the owner of each address block and the reason it is excluded. Have a second reviewer compare the worksheet with the planned configuration and confirm the intended gateway and DNS options separately.\nVerification\nUse an approved client test to inspect the assigned address and options. Compare the server’s configured range and exclusions with the worksheet, then reconcile observed leases with the intended eligible addresses. Preserve any unexpected allocation as a finding for investigation before extending the scope to additional clients.\nOfficial references\nMicrosoft Learn: DHCP scopes in Windows Server. Source reviewed September 8, 2026.",
                "datePublished": "2026-09-08T18:15:40+00:00",
                "dateModified": "2026-09-08T18:20:22+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260908-091-plan-exclusions-within-a-dhcp-scope-before-activating-its-address-range/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Plan exclusions within a DHCP scope before activating its address range"
                },
                "articleSection": [
                    "IT",
                    "Networks & Infrastructure"
                ],
                "keywords": [
                    "IT",
                    "Networks & Infrastructure",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Networks & Infrastructure",
                        "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
                    }
                ],
                "wordCount": 207,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "DHCP scopes in Windows Server",
                    "url": "https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-scopes"
                }
            }
        ]
    }
}