A DHCP scope is a range of IP addresses that the DHCP server can automatically assign to devices on a network. When designing scopes, you need to calculate the correct address pool for each subnet based on network segmentation. Exclusions remove specific addresses from the pool so they are never handed out dynamically, which prevents conflicts with statically assigned devices such as routers or printers. The scope effectively defines the boundaries of what the server can give out, and exclusions carve out addresses that must stay fixed.
A system architecture diagram showing how a DHCP scope allocates IP addresses, carving out exclusions for static devices and reservations for critical devices, while applying scope options to dynamic leases.
A lease duration tells a device how long it can keep its assigned IP address before it must ask the server for a renewal. Shorter leases free up addresses faster for networks with many temporary devices, while longer leases reduce renewal traffic for stable devices. Host reservations guarantee that critical devices, such as domain controllers or file servers, always receive the same IP address. The reservation links the device’s MAC address to a specific IP so the server always gives that same address, which is essential for services that rely on a fixed network identity.
Scope-wide options apply settings to every device that receives a lease from that scope, such as the default gateway, DNS server addresses, or domain name. These options make sure all clients on a subnet have the same network configuration without manual setup. Vendor-specific options go further by targeting devices from a particular manufacturer, allowing the DHCP server to send custom settings, like a specific VLAN tag or boot server address, only to certain hardware types. Both options are applied at the scope level and are sent along with the IP lease.
Validation ensures that clients in both on-premises subnets and Azure-connected subnets get the correct IP configuration. You can check the DHCP server logs, lease records, and address usage reports to see if devices are receiving the expected addresses and options. In a hybrid environment, a client on an Azure-connected subnet must still be able to reach the on-premises DHCP server or a DHCP relay agent for the assignment to work. Regular validation catches misconfigurations early, such as overlapping scopes or missing options, keeping the network reliable across all locations.
Eager to master hybrid server management? Discover how to administer Windows Server Hybrid Core Infrastructure on Azure, setting your path towards the Microsoft Certified: Azure Hybrid Infrastructure Administrator Associate certification!
Prepare and test your skills

Prepare and test your skills

Exclusions remove specific IP addresses from the DHCP server's address pool so they are never handed out dynamically, which prevents conflicts with statically assigned devices like routers or printers.
A host reservation guarantees a critical device always receives the same IP address by linking the device's MAC address to a specific IP within the scope, which is essential for services that rely on a fixed network identity.
Scope-wide options apply settings like the default gateway or DNS server addresses to every device that receives a lease from that scope. Vendor-specific options target devices from a particular manufacturer to send custom settings, like a specific VLAN tag, only to certain hardware types.
Validation ensures clients in both on-premises and Azure-connected subnets get the correct IP configuration, and it catches misconfigurations like overlapping scopes or missing options early, keeping the network reliable across all locations.