Delegating DNS Zone Management: BranchAdmins Group
Question
SIMULATION
-
You plan to delegate the management of a DNS zone named fabrikam.com located on DC1 to the BranchAdmins group.
You need to ensure that you can grant permissions to the fabikam.com zone.
To complete this task, sign in the required computer or computers.
Explanations
To delegate the management of a DNS zone named fabrikam.com to the BranchAdmins group, you can follow the steps below:
Log in to the Domain Controller (DC1) using an account with administrative privileges.
Open the DNS Manager by clicking Start, typing "DNS Manager" in the search box, and selecting the DNS Manager from the search results.
In the DNS Manager, expand the DNS server, and then expand the Forward Lookup Zones folder.
Right-click on the fabrikam.com zone and select Properties.
In the Properties dialog box, select the Security tab, and then click the Advanced button.
In the Advanced Security Settings dialog box, click the Add button to add a new group or user.
In the Select Users or Groups dialog box, type "BranchAdmins" in the text box and click the Check Names button to verify the group name.
Click OK to close the dialog box and add the group to the security list.
In the Permission Entry dialog box, select the following permissions for the BranchAdmins group:
- Full Control
- Write
- Create All Child Objects
- Delete All Child Objects
- Click OK to close all dialog boxes and save the changes.
By following these steps, you have delegated the management of the fabrikam.com zone to the BranchAdmins group and granted them the necessary permissions to manage the zone.
