Solved

Granting permissions to manage Windows DNS from different domain.

Posted on 2013-05-16
3
356 Views
Last Modified: 2013-08-20
Hello,

I am trying to grant a user permissions to modify (add or delete) DNS entries in DomainA while they are logged into a server in DomainB.  There is a two way trust between the domains.

I have added them to the DNSAdmins group on DomainA.

We DO NOT want them to be Domain Admins on DomainA.

We cannot launch the dnsmgmt.mmc and connect to the DNS server. We can ping the server, but cannot connect.

We'd even be OK with using the dnscmd command line tool, but I got an access denied error when I tried that.

What other permissions do I need to set in order to get this work?
0
Comment
Question by:CanHasCheezburger
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 22

Expert Comment

by:mcsween
ID: 39172503
How long did you wait after adding them to DNSAdmins?  You may have to wait for a directory sync to happen...

If you add them to the local administrators group on the DNS server can they do what they need?  (I know this isn't ideal; just for testing).
0
 
LVL 2

Author Comment

by:CanHasCheezburger
ID: 39172516
The DNS server is a Domain Controller. Don't want them to be domain admins.

I added them about 5 minutes before the test.
0
 
LVL 22

Accepted Solution

by:
mcsween earned 500 total points
ID: 39172534
This describes a slightly different issue but sounds like it might be causing your issue too.  As these zones are probably created as domain or forest zones the DNSAdmins group doesn't have access to modify the zones or records within.

http://support.microsoft.com/kb/939090
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question