Solved

How do I change security / permissions on multiple records?

Posted on 2008-09-30
3
354 Views
Last Modified: 2012-05-05
We have 3 AD-Integrated Primary Forest DNS Zones:

company.net  (forest root domain)
corporate.company.net  (child domain)
retailstores.company.net  (child domain)

Our DNS Servers are only on our domain controllers (all 20 DCs in the forest
host the zones).

We have security group called "DNS Record Administrators" and we have just delegated them Full Control on these 3 zones. They appear as full control on the zones after being added so that works correctly. When they create a record, all is well. However all of the existing records don't list this new group in their Security (ACL). It appears I cannot change security on more than 1 record at a time in the DNS Administration snap-in nor ADSI Edit to give them permission to modify the existing records... how do I get them access to all the existing records?
0
Comment
Question by:FLPeople
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
Chris Dent earned 250 total points
ID: 22612552

Hmm they should be inherited if you set the security on the zone level. That gives us two questions:

1. Are permissions set to inherit; Advanced Security, does it Apply To "this object only" or all child objects as well?
2. Is Inheritance permitted on each record?

Chris
0
 
LVL 2

Author Comment

by:FLPeople
ID: 22614753
Was set to "this object only" - whoops. I had thought the default was this object and child objects... Glossed right over that. Changed. Fixed. Thanks!
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 22614798

Nice and easy. Glad it fixed it :)

Chris
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
GPupdate /sync 1 43
ACTIVE DIRECTORY 18 51
AD Sites/AD Replication 11 34
Office 365: Content Search, Search and Purge 17 16
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article runs through the process of deploying a single EXE application selectively to a group of user.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question