Solved

Granting permissions to manage Windows DNS from different domain.

Posted on 2013-05-16
3
291 Views
Last Modified: 2013-08-20
Hello,

I am trying to grant a user permissions to modify (add or delete) DNS entries in DomainA while they are logged into a server in DomainB.  There is a two way trust between the domains.

I have added them to the DNSAdmins group on DomainA.

We DO NOT want them to be Domain Admins on DomainA.

We cannot launch the dnsmgmt.mmc and connect to the DNS server. We can ping the server, but cannot connect.

We'd even be OK with using the dnscmd command line tool, but I got an access denied error when I tried that.

What other permissions do I need to set in order to get this work?
0
Comment
Question by:CanHasCheezburger
  • 2
3 Comments
 
LVL 21

Expert Comment

by:mcsween
ID: 39172503
How long did you wait after adding them to DNSAdmins?  You may have to wait for a directory sync to happen...

If you add them to the local administrators group on the DNS server can they do what they need?  (I know this isn't ideal; just for testing).
0
 
LVL 2

Author Comment

by:CanHasCheezburger
ID: 39172516
The DNS server is a Domain Controller. Don't want them to be domain admins.

I added them about 5 minutes before the test.
0
 
LVL 21

Accepted Solution

by:
mcsween earned 500 total points
ID: 39172534
This describes a slightly different issue but sounds like it might be causing your issue too.  As these zones are probably created as domain or forest zones the DNSAdmins group doesn't have access to modify the zones or records within.

http://support.microsoft.com/kb/939090
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Auto-Enrollment Group Policy 2 43
Domain Printers Not Listed 17 50
spf record 8 83
Backup DHCP Server 8 94
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now