--- title: "Prerequisites for DHCP" canonical: "https://docs.infoblox.com/space/UniversalAssetInsights/1835925677/Prerequisites%20for%20DHCP" format: markdown --- Complete the following prerequisite configuration before creating a discovery job for DHCP. Create a domain user and add the user to the following builtin user groups: - DHCP Administrators - Remote Management Users ## Creating Microsoft Active Directory Credentials Before configuring network discovery for DHCP, create credentials for Active Directory. For more information, see *[Creating Microsoft Active Directory Credentials](https://infoblox-docs.atlassian.net/wiki/spaces/UniversalAssetInsights/pages/1693876284)*. ## Configure WMI Permissions for DHCP management On each Windows DHCP server that will be managed by Infoblox perform the following steps: 1. Access **Run** by searching for Run in the Windows search bar and by clicking Run. 2. Run **wmimgmt.msc** by inputting wimimgmt.msc in the **Open:** text field and by clicking **OK**. 3. Right click **WMI Control (Local)**, then click Properties. 4. Click the Security tab WMI Control (Local) Properties panel. 5. Expand **Root**, **Microsoft**, **Windows**, then click **DHCP** in the list that is revealed. 6. With DHCP highlighted, click **Security**. 7. Click **Add** in the Security for ROOT\Microsoft\Windows\DHCP panel. 8. Type in **DHCP Administrators** in the Enter the object names to select… text field. Then, click **Check Names**. 9. If DHCP Administrators is underlined, the appropriate group was located and selected. Click **OK**. *Note: if you are using a different user for the DHCP management use case, select that user instead of the DHCP Administrators group.* 10. In the Security for ROOT\Microsoft\Windows\DHCP panel, select **DHCP Administrators **in the Group or Users names field. *Note: if you selected a user instead of a user group, select that user instead.* 11. Click the **Allow **checkboxes associated with **Execute Methods** and **Remote Enable** in the** Permissions **field. 12.    Click **Apply**. 13.    Click **OK**.   ## Enable WinRM and CredSSP on each Domain Controller Enable Windows Remote Management and Credential Security Support Provider Protocol on each Domain Controller and DHCP Server that will be managed by Infoblox via PowerShell commands. 1. Open an Elevated PowerShell console by Searching for **PowerShell** in Windows Search, then by right-clicking **PowerShell** and clicking **Run as Administrator.** 2. In the PowerShell Window, input the following commands: a.          Enable-PSRemoting -Force b.          Enable-WSManCredSSP -Role Server ## Prepare the Windows Member Server for the DHCP Management Use Case On the Windows Member server running the Universal DDI Agent for the DHCP management use case PowerShell commands and Group Policy edits are required for the integration with Infoblox and Windows to work. To prepare the Windows Member server to manage Windows DHCP Servers, perform the following steps. 1. Open an Elevated PowerShell console by Searching for **PowerShell** in Windows Search, then by right-clicking **PowerShell** and clicking **Run as Administrator.** 2. In the PowerShell Window, input the following commands*.* As a reminder these commands must be run on the Windows Member server running the Universal DDI Agent for the DHCP management use case. Replace the example IPs of “10.10.10.6,10.10.10.14” with the IPs of the DHCP servers you intend to manage with Infoblox. A Single IP or multiple IPs delineated by commas may be used.)*:* a. Enable-WSManCredSSP -Role Client -DelegateComputer "10.10.10.6,10.10.10.14" b. Set-Item WSMan:\localhost\Client\TrustedHosts -Value "10.10.10.6,10.10.10.14" 3. Open the **Local** **Group Policy Editor** by typing gpedit.msc in the Windows search bar. Then, by clicking Edit Group Policy in the results of the search. 4. In the Local Group Policy Editor, navigate to: **Computer Configuration  Administrative Templates  System Credentials Delegation**. 5. In the list of Credentials Delegation policies, double-click **Allow delegating fresh credentials**. 6. **Enable** the policy by clicking the Enabled bubble. 7. Click the **Show…** button in the Options table. 8. Input the following entries into the table of servers *(Replace the example text in the following entries with the appropriate information associated with your environment. The following text: and .., and *.. must be replaced with the name of your DHCP server, proper domain of the DHCP server, and the top-level-domain that your domain is associated with. Additionally, include all DHCP servers you intend to manage with Infoblox.*): a. WSMAN/ b. WSMAN/.. c.  WSMAN/*.. d.  Click **OK** to confirm the addition of the servers. 9. Click **Apply** to confirm the changes to the Policy. 10.    Click **OK**. 11.    Double-click **Allow delegating fresh credentials with NTLM-only server authentication**. 12.    **Enable **the policy by clicking the Enabled bubble. 13.    Click the **Show…** button in the Options table. 14.    Input the following entries into the table of servers *(Replace the example text in the following entries with the appropriate information associated with your environment. The following text: and *.. must be replaced with the IP of your DNS server, proper domain of the DNS server, and the top-level-domain that your domain is associated with. Additionally, include all DNS servers you intend to manage with Infoblox using the same format of WSMAN/. This step is only required if Kerberos is disabled in your environment, or if NTLM is preferred*): a.  WSMAN/ b.  WSMAN/*.. 15.    Click **OK** to confirm the addition of the servers. 16.    Click **Apply** to confirm the changes to the Policy 17.    Click **OK**. 18.    Open a Command Prompt window on the Windows Member server. Search for cmd with Windows Search and click **Command Prompt** in the results. 19.    In the Command Prompt window, input the command **gpupdate /force**.