Did you find this useful?
Socialize it today.

Delegating DNS Rights and Permissions to Users

Friday, October 28, 2011

Interesting question found on the Microsoft TechNet forums.... "I want to delegate one of my users to manage the DNS records. But I don't want him to have any privilege to change the DNS server settings. What action can I take?"

To provide the ability for a user to manager the DNS server settings...

Add the user to the DNSAdmins group. This group, by default, already has the necessary rights and permissions to administer the DNS server.

If you want for this group or another group to manage the content of the zones hosted on the server, follow this step.

Using the DNS Admin console, right click the domain of interest, choose properties. Access the Security tab. Add the group that you want to provide access, to the Access Control List (ACL). Next, modify the Access Control Entry (ACE) to provide the necessary permissions you wish to provide the group.

dns delegate permissions

Once the proper permissions have been set, have the user install and run the DNS Admin console. The console is available once you install the RSAT (Windows Vista/7/2008), or AdminPak (Windows 2000, 2003, XP) tool kit.

Please help us spread the word by socializing it today!

email contact us

Did you find something wrong with the information on this page? Please take a moment to report it to us so that we can continue to improve the quality of the information on this site. Click here to report an issue with this page.

Recommended Books & Training Resources

Windows Server 2008 R2 Unleashed MCITP Windows Server 2008 Enterprise Administrator: Training Kit 4-Pack: Exams 70-640 70-642 70-643 70-647