DNS PERMISSIONS windows server 2003

Posted on 2007-10-18
Last Modified: 2009-07-29
i have 1 domain controller
I want to give "user1" the permission to open and  manage DNS " when he try to open "administrative tasks>DNS" the following error message comes up "You dont have permission to Access this DNS server")
I gave him most important permissions . i gave him DNS Admins group ,dmoan amin , enterprise admin , replicator ... etc ) except Administrators group  
so i search on internet i have found that he must member of Adminstrator group OR delegate this task
the problem is
i dont want him to be member of administrators group
and i dont have any idea about delegation

So i need help , how to make him manage DNS without being a member in afministrator group
I hope your answer in Steps
thanks alot
Question by:ali_alannah
    LVL 22

    Expert Comment

    Well he is in the Administrators group if he is in Enterprise admin's.
    LVL 7

    Expert Comment

    you have given this guy the most powerful rights you can have in your domain....enterprise admins and also domain admins....

    just add this guy to the DNS admins group.

    if you goto your dns server, goto the dns management console, and right click the dns server name. You then need to click properties and select the security tab. Add the user to the permissions through here....


    Author Comment

    Hello : DenisCooper
    Thanks alot it works properly but i have one question do you suggest to remove (enterprise admins and also domain admins) from this guy if i need him to create account , joining workstations to the  domain , manage DNS ,
    Please am wiating your reply
    again thanks alot
    LVL 7

    Accepted Solution

    yes i do....he could potentially bring down your domain.....

    use delegation....same thing, on the OU's you want him to create users etc, just click properties and then the delegation tab...

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    It is a known fact that servers reach the end of their lives. Some get there quicker than others, based on age, manufacturer, usage and several other factors. However, if your organization has spent time deploying Microsoft's Active Directory server…
    The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now