Running 2008 DNS servers in a 2003 forest/domain level. Is it possible to allow a single user to update a single DNS record? Using dnscmd.exe it appears the user must be aDNSAdmins. I've tried adding the user to the DNSUpdateProxygroup and also giving them full control on the record itself but no joy (still using the dnscmd.exe). Perhaps I need to give them some write access on the zone also or perhaps I need to use a specific API? This should be possible as computer accounts can
register DNS records so I'm thinking i need ot write some code with the appropriate API but I cannot find any info to do this.
↧