dns delegate

Posted on 2007-07-19
Last Modified: 2010-03-17
I have done some delegations in the AD for the users. "Active Directory Users and Computers"

I would like to do the same for the DNS server.

I am running Windows 2003 R2 AD with DNS integrated.
Question by:alisafia
    LVL 70

    Accepted Solution

    Delegation of DNS is a different process to Active Directory Delegaition. In DNS delegation means taking part of your DNS namespace - a sub-domain for example - and making a different DNS server authoratitive for that zone. I am not sure that this is really what you want to do.

    If you just want some other users the be able to manage DNS then just add them to the DNSAdmins Security Group.
    LVL 1

    Author Comment

    Well adding them to the dnsadmins will let them have full access to DNS server. How do I restrict them, like giving them limited access.
    LVL 70

    Expert Comment

    What to you mean - limited access - what to you want them to be able to do or not do?
    DNS is pretty simple - there are not may options that you can allow/disallow
    LVL 11

    Expert Comment

    what do your mean by limited access, do you mean like having them only see wht are the A records or you need to have them add records to the DNS server. please state clearly so we can guide you.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Suggested Solutions

    At least once a month I see a Question in one of the Windows Server related Zones asking about Best Practices for GPO Security.  I have been in IT for 20 years, and a Sys Ad for over 15.  I know this will sound cliché, but this is mostly a preferenc…
    As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now