Blocking a device from respondong to requests from clients and offering IP addresses

[jdonahue111]

Currently the Cisco DHCP service is not enable and IP addresses are being handled by a Windows Server 2008 DC Is there a way to block a any other connected device from handing out IP addresses without affecting the main DHCP server. I'm not sure what effect blocking ports udp 67 and 68 on the suspected device the IP address for it comes up as 72.xx.xx.xx which is not an address permitted to the inside from the outside. How can I just allow the windows server ip address to respond and offer IP addresses to client?

[Milos Megis]

Hi,
you can do this with DHCP snooping feature.
Your DHCP server will be on trusted port and all other devices on untrusted ports.
So all replies from DHCP servers on untrusted ports will be dropped.