Re: Authenticated Users in DNS

Tech-Archive recommends: Fix windows errors by optimizing your registry

What security groups they beleong to?

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator





"Pigskin" <Pigskin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4EA1459A-B530-4926-8BA3-66BD2D62EFBA@xxxxxxxxxxxxxxxx
How do I do that? It appears to only be OU admins that can make the
changes
but they can create any DNS record via the DNS console on their desktop.

"Jorge Silva" wrote:

don't allow the users to touch on DNS server.
What records are the users creating?

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator





"Pigskin" <Pigskin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6164419A-19D1-46D9-8CD9-86CFE796D975@xxxxxxxxxxxxxxxx
We need the computers to be able to register themselves, just not users
to
be
able to go in and manually add entries. Any ideas how to do this?

"Jorge Silva" wrote:

The computers need that permission to register himself on the DNS.
If you don't want to allow that just select the option to not allow
updates.

I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator





"Pigskin" <Pigskin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1A932C37-DCFA-4E78-825F-39BC9B8D9422@xxxxxxxxxxxxxxxx
Did that change recently? If I would remove that privilege what
would
it
do?
It used to be that only domain admins could manually add DNS
entries.
How
would I take this back without screwing up the ability of computers
to
register with DNS

"Jorge Silva" wrote:

by default in AD INTEGRATED DNS ZONES, the Authenticated users can
create
child objects this is the normal behavior.



--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator





"Pigskin" <Pigskin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A791A5A0-AC9D-4C47-9231-59F3C440D45F@xxxxxxxxxxxxxxxx
We've run into an issue where it looks like everyone has access
to
write
to a
dns zone. Any idea where this may be delegated?

"Jorge Silva" wrote:

Hi

Authenticated users have "Create all child objects" permission.

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator





"Pigskin" <Pigskin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2B5C125D-4DEE-452F-8FD4-C0F7D969158C@xxxxxxxxxxxxxxxx
By default, what rights should authenticated users have in a
DNS
zone?














.

Relevant Pages

  • Re: raise domain controller functional level
    ... I hop that helps ... Good Luck ... Systems Administrator ... NTDS Settings object of domain controller: ...
    (microsoft.public.windows.server.active_directory)
  • Re: troubles logging in to domain - on account does, the other doesnt
    ... Good Luck ... Systems Administrator ... Connection-specific DNS Suffix. ... I have two profiles created on AD. Person1 and Person2. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authenticated Users in DNS
    ... I hop that helps ... Good Luck ... Systems Administrator ... It used to be that only domain admins could manually add DNS entries. ...
    (microsoft.public.windows.server.active_directory)
  • Re: A real tough one with DCPromo
    ... Good Luck ... Systems Administrator ... How to view and transfer FSMO roles in Windows Server 2003 ... DNS, DHCP, Wins, DFS, etc). ...
    (microsoft.public.windows.server.active_directory)
  • Re: nsdsutil cant find database?
    ... I hop that helps ... Good Luck ... Systems Administrator ... I'll also have a read of the Knowledge Base articles in the first reply. ...
    (microsoft.public.win2000.active_directory)