Solved

delegate read-only permissions to DNS.

Posted on 2007-03-19
7
1,559 Views
Last Modified: 2011-04-14
I need to delegate read-only permissions to DNS.
DNS is 2003 AD Integrated.
I want to delegate to a service team group.
0
Comment
Question by:viperacom
7 Comments
 
LVL 14

Expert Comment

by:inbarasan
ID: 18754587
http://support.microsoft.com/kb/256643
It is possible to give read only permission on the zone. Pls check the above article.
0
 
LVL 14

Expert Comment

by:inbarasan
ID: 18754593
http://technet2.microsoft.com/WindowsServer/en/library/c5a89307-803d-4af4-af6a-0754b82c49121033.mspx?mfr=true

Check the above link . It shows step by step method to do the delegation
0
 
LVL 1

Author Comment

by:viperacom
ID: 18769519
sorry they didnt really help me.

I managed to fix the problem by editing the ACL on the zone to include read access to the group.
i also had to edit the security on the DNS system object within AD
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 1

Author Comment

by:viperacom
ID: 18769522
suggest PAQ with points refunded
0
 

Accepted Solution

by:
AnnieMod earned 0 total points
ID: 19701158
PAQed with points refunded (500)

AnnieMod
Cleanup Admin
0
 
LVL 1

Expert Comment

by:Nelesh_N
ID: 23578543
I've done this but the test user can create dns records!!!
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now