Modify Security for a Resource Record
Applies To: Windows Server 2008
You can use this procedure to control who can update or remove a resource record from a zone. For more information, seeSecuring DNS Resource Records.
Membership in the DnsAdmins or the Domain Admins group in Active Directory Domain Services (AD DS), or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).
To modify security for a resource record
Open DNS Manager.
In the console tree, click the applicable zone.
In the details pane, click the record that you want to view.
On the Action menu, click Properties.
On the Security tab, modify the list of member users or groups that are allowed to securely update the applicable record and reset their permissions as needed.
Additional considerations
To open DNS Manager, click Start, point to Administrative Tools, and then click DNS.
Secure dynamic updates are only supported or configurable for resource records in zones that are stored in Active Directory Domain Services (AD DS).
Security settings that are applied to resource records affect only dynamic updates. These security settings do not affect who may administer the zone where these resource records are located. For information about the security settings that affect who may administer a zone, see "Additional references."
Resource records with the same name share the same resource record security settings. The names of resource records are listed in the Name column of DNS Manager.