Re: Set DACL on multiple zones?

From: marv (marv_at_discussions.microsoft.com)
Date: 01/13/05 

Date: Thu, 13 Jan 2005 10:27:01 -0800

OK maybe I need to clarify a few things.
I´ve got about 50 reverse lookup zones and I havn´t found a way to force the
propagation of permissions. The zones are all set up to use inheritance but
unlike setting permissions on files and folders there is no check box for
forcing the propagation. Or am I mistaken?
I want to delegate control to a new group for the reverse lookup zones which
were created some time ago. Unfortunately I´m a lazy computer nerd and I
shiver only by thinking about doing those 6 mouse clicks per zone. I´d rather
wait a few days for this nice community to give me some advice.
I´ve been looking into the AD/System/MicrosoftDNS container to see if there
is a way to apply the permissions from there rather than through the DNS mmc
snap-in but I guess it´s basically the same thing. Any ideas on how to save
my index finger from tiring?
I havn´t been able to find a way to set the permissions with dnscmd.exe.

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> In news:0A0E9287-1D0B-4D88-BAEC-C8024A0BAA1A@microsoft.com,
> marv <marv@discussions.microsoft.com> commented
> Then Kevin replied below:
> > I´m talking about the AD objects.
> > I have alot of dns zones and I´m looking for an easy way
> > to change the permissions of them.
> > I use Windows 2003 and the dns info is in an application
> > partition in AD.
>
> Right click on the server name in the DNS console, and select the Security
> tab. The zones must be set to allow inheritable permissions to propagate.
> And any permissions you want to propagate must be "This object and all child
> objects" Which is set with the Advanced button on the Security tab.
>
>
>
> --
> Best regards,
> Kevin D4 Dad Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>

Loading