Refrain from connecting non-approved equipment to our enterprise network
Network and other connected equipment not issued by HCDE should never be connected to our network. Especially routers as was the case here. It will cause a loop if the LAN port is connected to an access switchport, distributing rogue IP addresses and incorrect DNS to any machine requesting an IP or "next available" client.
In cases where this is authorized, it is recommended that the DHCP scope of the router be changed to another subnet dissimilar to our corporate DHCP subnet, such as 172.16.x.x so it can be identified quicker should this ever happen again.