This days implementing VPN solution is almost a daily task … I encountered a bug that has been around for some time now. If you deploy RRAS on Windows Server 2019 that is not DHCP server it does not request / reserve IP addresses from DHCP (that runs on some other server).
Everything works perfectly if you assign static range of IP addresses but I just want to manage VPN client IP addresses by using DHCP server.
In System log in Event viewer you will receive Event ID 20167 with information:
After a quick search I found the article on MS forums that states:
Add this registry entries to your VPN server and reboot it.
reg add “HKLM\SYSTEM\CurrentControlSet\Services\Dhcp” /v RequiredPrivileges /d “SeChangeNotifyPrivilege”\0″SeCreateGlobalPrivilege”\0″SeImpersonatePrivilege”\0 /t REG_MULTI_SZ /f
Hope it helps like it did in last five implementations I was working on recently.
Luka Manojlovic 
Make sure the quotes in the post are just the “quote” symbol and not mangled by your cut/paste into a command prompt
LikeLiked by 1 person
How about if I do not want RRAS to Assign APIPA IP? Static IP will be assigned by AD and if IP is already connected on a different Device, it should not let another connection be made it should through 720 or 13899 error on windows based client machine or any other OS.
Currently, second connection gets APIPA IP and it is unable to browse.
LikeLike