DHCP failover database reconcile
Overview
Hot-standby or load-balance DHCP failover can drift after network partitions or buggy patches. Users get duplicates or ghost leases.
Symptoms
Conflict warnings, leases not freed, ICMP sweep shows address in use but DHCP thinks free.
Tooling
netsh dhcp server verify, Event ID 20292, compare scope statistics both nodes.
Reconcile steps (high level)
- Export scopes both sides; identify mismatch epoch.
- Follow Microsoft reconcile procedure for your mode—often pause partner, replicate, resume.
- Afterward, verify exclusions and reservations synced.
Prevention
Monitor heartbeat alerts; stable time sync; avoid hand-editing one node only.
Comms
Wireless VLANs hurt loudest—schedule maintenance off-peak; have lease time short temporarily to accelerate healing with user impact understood.
Evidence
Save console exports for audit “we know who had which lease when.”
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...