Securing DNS

[John Q. Public]

I need to tighten administrative access to DNS on Win2K. What accounts (e.g.
SYSTEM) must have access in order to ensure the service works? Is there a
good reference/book/whitepaper that addresses this?

--John

 

[Herb Martin]

I need to tighten administrative access to DNS on Win2K. What accounts (e.g.
SYSTEM) must have access in order to ensure the service works? Is there a
good reference/book/whitepaper that addresses this?

Only the Admin needs access to the DNS server. (There might be DHCP
issues if the DHCP server do dynamic registration but that is generally a
minor
point.)

Chances are your file system (NTFS) is a far bigger problem though.

Most people never fully secure the file system, nor especially the registry.