Solved

delegate read-only permissions to DNS.

Posted on 2007-03-19
7
1,568 Views
Last Modified: 2011-04-14
I need to delegate read-only permissions to DNS.
DNS is 2003 AD Integrated.
I want to delegate to a service team group.
0
Comment
Question by:viperacom
7 Comments
 
LVL 14

Expert Comment

by:inbarasan
ID: 18754587
http://support.microsoft.com/kb/256643
It is possible to give read only permission on the zone. Pls check the above article.
0
 
LVL 14

Expert Comment

by:inbarasan
ID: 18754593
http://technet2.microsoft.com/WindowsServer/en/library/c5a89307-803d-4af4-af6a-0754b82c49121033.mspx?mfr=true

Check the above link . It shows step by step method to do the delegation
0
 
LVL 1

Author Comment

by:viperacom
ID: 18769519
sorry they didnt really help me.

I managed to fix the problem by editing the ACL on the zone to include read access to the group.
i also had to edit the security on the DNS system object within AD
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 1

Author Comment

by:viperacom
ID: 18769522
suggest PAQ with points refunded
0
 

Accepted Solution

by:
AnnieMod earned 0 total points
ID: 19701158
PAQed with points refunded (500)

AnnieMod
Cleanup Admin
0
 
LVL 1

Expert Comment

by:Nelesh_N
ID: 23578543
I've done this but the test user can create dns records!!!
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question