Perhaps someone on the list could help. We've recently built a Windows 2003 Active Directory. Our DNS administrators are not the same individuals as our domain administrators. We believed we could put our DNS administrators in the DNSAdmins group, and they would have all of the rights they need. However, they are receiving access denied messages. When we check each of the DNS zones, DNSAdmins are not listed in the security tabs. However, when we check the server in the DNS console, DNSAdmins are listed. Why is this? How can the zone permissions be fixed without manually changing the permissions on each one? The zones do appear to be inheriting permissions from somewhere, but it's not the server level of the DNS mmc.

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee� Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to