and what will happen to static records...etc.
This is with junior admins, who are made administrators for particular site or OU.
Now, I don't have time to verify each and every important record (static or dynamic), so I wanted to give read permission on zone and let them verify it on their own.
On 5/25/06,
Al Mulnick <[EMAIL PROTECTED]> wrote:
That's a first for me: a user that needs that information. Admins I can understand and I can see forcing an admin to use a command line or to look for employment elsewhere.Unfortunately, much of that particular information used for reporting is stored as a blob, IIRC.Curious though, if they find this information what do they do with it?
On 5/25/06, Kamlesh Parmar <[EMAIL PROTECTED] > wrote:well.. need to verify information like... Record time stamp and "Delete this record when it becomes stale" check box
nslookup doesn't give me this information.
Also, users are weary of using command line... :-(
On 5/24/06, Al Mulnick <[EMAIL PROTECTED] > wrote:You'll need a description of the rights needed to open the tool in this case, as everyone has read access by default. IIRC, the Windows 2000 DNS white paper describes how to delegate rights etc. using tools such as ADSIEDIT or DSACLS.Curious though: why bother? Read access to a DNS zone? Has the user ever used NSLOOKUP or DIG? You can read the zone records using these tools quite easily and it'll tell you just about everything you want to know about the RR. Is there a different requirement in this?Al
On 5/24/06, Kamlesh Parmar <[EMAIL PROTECTED] > wrote:Is it possible to give normal domain account rights to view ADI DNS zone in console ?I tried to give normal account a rights to READ thru ACL on zone, but it didn't help.Only otherway, I know is to create a secondary for that zone, on that users machine. but thats overkilll :)
--Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
