Plan exclusions within a DHCP scope before activating its address range

Source facts

A DHCP scope groups addresses that a server can lease to clients on a subnet. Microsoft describes a single scope as an address range together with its configuration options. The Windows Server guidance permits one scope for a subnet, defined as one continuous address range. Administrators needing several usable ranges inside that subnet define the scope first and then add exclusion ranges. Microsoft documentation.

Applicability

Identify the subnet, proposed pool, existing address allocations, and reservations or exclusions already recorded. Review the addressing plan before enabling the scope, and ask the network owner to resolve conflicting inventory entries.

DSE recommendation

Prepare an address worksheet showing the overall scope and every intended exclusion. Name the owner of each address block and the reason it is excluded. Have a second reviewer compare the worksheet with the planned configuration and confirm the intended gateway and DNS options separately.

Verification

Use an approved client test to inspect the assigned address and options. Compare the server’s configured range and exclusions with the worksheet, then reconcile observed leases with the intended eligible addresses. Preserve any unexpected allocation as a finding for investigation before extending the scope to additional clients.

Official references

Microsoft Learn: DHCP scopes in Windows Server. Source reviewed September 8, 2026.