Well, you can try this
1- Disable the known dhcp server, and have a node release/renew it's dhcp-assigned address. If it gets one then you know there's another DHCP server.
2- Do the same thing as above but not necessarily shutting the other one
off. Just look at the packets and after a DHCP request goes out, see who responds.
3- Ask around and try to find out who was the dumbass that is responsibe ;-)
A fourth suggestion would be to install a Sniffer/Analyzer program, to see what's going over the line. You'd be specifically looking for
DHCP-acks or Nacks.
sniff traffic on udp ports 67 and 68.
Alternately, run a port scanner on udp port 67 over your nets, and anything that is 'open' is a potential DHCP server.
Hope this Helps
Aslam