# Install the DHCP relay role on the intended remote subnet

> Which Windows Server role supplies DHCP relay, and what must exist on the server side?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-101-install-the-dhcp-relay-role-on-the-intended-remote-subnet/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:15:30+00:00
- Modified: 2026-09-08T18:23:26+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: IT, Networks & Infrastructure
- Reading time: 1 minutes

## What you need to know

Which Windows Server role supplies DHCP relay, and what must exist on the server side?

## Potentially affected

Administrators deploying a Windows Server DHCP relay agent between subnets.

## DSE recommendation

Prepare a diagram linking one client subnet to its relay and intended DHCP scope.

## Article

## Source facts

A DHCP relay forwards client broadcasts toward a DHCP server on another subnet, allowing that server to supply addresses and configuration. Microsoft’s prerequisites include a Windows Server computer in the remote subnet and a DHCP server with a scope for that subnet. The relay belongs to the Remote Access role. Installing the DHCP Server role does not install this relay feature. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-deploy-relay-agent).

## Applicability

Identify the client subnet, relay interfaces, destination DHCP servers, and scope configuration. Review any existing relay devices and the intended network path before adding another forwarding point.

## DSE recommendation

Prepare a diagram linking one client subnet to its relay and intended DHCP scope. Have the routing and address-management owners approve the interface and destination choices. Record the role installation and Routing and Remote Access configuration separately so another administrator can reproduce the intended forwarding path.

## Verification

Use a controlled client lease request on the remote subnet and inspect the resulting address and options. Correlate client, relay, and server observations for that request. Repeat for each configured subnet and preserve timeouts or an unexpected scope assignment as failures requiring investigation before broader use.

## Official references

[Microsoft Learn: Install DHCP relay agent for Windows Server](https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-deploy-relay-agent). Source reviewed September 8, 2026.

## Primary reference

- Name: Install DHCP relay agent for Windows Server
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/dhcp-deploy-relay-agent
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Install the DHCP relay role on the intended remote subnet,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-101-install-the-dhcp-relay-role-on-the-intended-remote-subnet/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.