you need to add network service in firewall for dhcp and dns
open sepm
policies
firewall
right click edit
click on add rules at the bottom
click on add network service at the bottom
select dhcp server, dns, ftp, whatever you want to allow
click on finish
move this policy to the top, ( 1st)
apply to all your groups,should allow dhcp request