Re: Query ACL

From: Ace Fekay [MVP] (firstnamelastname_at_hotmail.com)
Date: 03/24/04 

Date: Wed, 24 Mar 2004 14:18:44 -0500

"nonbindguy" <anonymous@discussions.microsoft.com> wrote in message
news:12b5301c411bf$70b62ef0$a401280a@phx.gbl...
>
> It doesn't have to be to the view feature, the "allow
> query" statement available since bind 8...
>
> the question may boil down to whether you can create a
> security group based on IP segment, but not necessarily
> site based, as some networks may not belong to an AD
> domain but still need to query the zone.
>
> can machines outside a AD domian query the AD integrated
> DNS? is the everybody group for that? by the way I think
> Read is for both admin and query.

There's no way I'm aware of creating a security group base on IP subnet in
MS DNS. However there's a netmask feature ... but this more applies to an
alternative to Round Robin then what you're trying to do. Here's a snipet
below from the help files (chec the DNS help files for examples to see what
I mean):

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Enable netmask ordering:
Determines whether the DNS server reorders A resource records within the
same resource record set in its response to a query based on the IP address
of the source of the query.
By default, the DNS Server service uses local subnet priority.

Prioritizing local subnets.:
This feature requires that the client application attempt to connect to the
host using its closest (and typically fastest) IP address available for
connection.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

As for the security tab, its only available with AD INtegrated zones and is
just for administration... here's another snipet:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Manage the discretionary access control list (DACL) on DNS servers running
on domain controllers. In addition to the default DNS Server service
settings that affect security described above, DNS servers configured as
domain controllers use a DACL. The DACL allows you to control the
permissions for the Active Directory users and groups that control the DNS
Server service.
The following table lists the default group or user names and permissions
for the DNS Server service when it is running on a domain controller... etc

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 

-- 
Ace
Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.
Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
-- 
=================================

Relevant Pages

  • Re: Query ACL
    ... >> can machines outside a AD domian query the AD ... >MS DNS. ... >Determines whether the DNS server reorders A resource ... >Manage the discretionary access control list on ...
    (microsoft.public.win2000.dns)
  • RE: Help Needed
    ... Yes this is an Access form, and this form is being used to gather criteria to ... be used in the SQL Query. ... By removing the 'Control Source' property, I can no longer change the ... it sounds like this is kind of a query by form setup. ...
    (microsoft.public.access.queries)
  • Problems in Access (error 2185) creating custom form to build dynamic query.
    ... The form should build a query that can be stored or used to view the ... pure VB6 form connected to an Access 2000 MDB database. ... When I click the command button to display the query with just one parameter ... control has the focus". ...
    (microsoft.public.access.formscoding)
  • Re: How can I show data in a form
    ... >> create a new query with all the fields in that you want ... >> 'Control Source' property. ... >>> Query - Customer Query ... >>> Cost per Hour ...
    (microsoft.public.access.forms)
  • Re: Help Please -- Importing from excel to access
    ... The SQL statement from your query shows that ControlNum is a field in ... If PONumber stands for "purchase order", ... Orders to Customer - not directly related ... At one point it seems to be, when you say "each control number relates to ...
    (microsoft.public.access.externaldata)