Solved

How do I change security / permissions on multiple records?

Posted on 2008-09-30
3
363 Views
Last Modified: 2012-05-05
We have 3 AD-Integrated Primary Forest DNS Zones:

company.net  (forest root domain)
corporate.company.net  (child domain)
retailstores.company.net  (child domain)

Our DNS Servers are only on our domain controllers (all 20 DCs in the forest
host the zones).

We have security group called "DNS Record Administrators" and we have just delegated them Full Control on these 3 zones. They appear as full control on the zones after being added so that works correctly. When they create a record, all is well. However all of the existing records don't list this new group in their Security (ACL). It appears I cannot change security on more than 1 record at a time in the DNS Administration snap-in nor ADSI Edit to give them permission to modify the existing records... how do I get them access to all the existing records?
0
Comment
Question by:FLPeople
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 71

Accepted Solution

by:
Chris Dent earned 250 total points
ID: 22612552

Hmm they should be inherited if you set the security on the zone level. That gives us two questions:

1. Are permissions set to inherit; Advanced Security, does it Apply To "this object only" or all child objects as well?
2. Is Inheritance permitted on each record?

Chris
0
 
LVL 2

Author Comment

by:FLPeople
ID: 22614753
Was set to "this object only" - whoops. I had thought the default was this object and child objects... Glossed right over that. Changed. Fixed. Thanks!
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 22614798

Nice and easy. Glad it fixed it :)

Chris
0

Featured Post

Enroll in June's Course of the Month

June's Course of the Month is now available! Every 10 seconds, a consumer gets hit with ransomware. Refresh your knowledge of ransomware best practices by enrolling in this month's complimentary course for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question