Delegation of DNS Administration

[Guest]

I am running Windows 2000 and DNS (Primary, not AD
integrated) and wish to delegate administration of DNS to
non- domain admins. DNS is running on a member server and
I do not want to make the DNS administraors members of the
local administrators group. Does anyone know if there is
a way of permissioning the application to allow Power
Users to administer DNS?

 

[Kevin D. Goodknecht [MVP]]

In (e-mail address removed) <[email protected]>
posted a question
Then Kevin replied below:

I am running Windows 2000 and DNS (Primary, not AD
integrated) and wish to delegate administration of DNS to
non- domain admins. DNS is running on a member server and
I do not want to make the DNS administraors members of the
local administrators group. Does anyone know if there is
a way of permissioning the application to allow Power
Users to administer DNS?

Power Users is a Machine group, You can add domain groups to the machine
group, you cannot add machine groups to a domain group.
That means DNS Admins can be in the Power Users group, but the Power Users
Group cannot be in the DNS Admins Group.