DNS Mangement tool

[Houserocker]

I work for a big corporation which has centralized the AD envoriment at HQ. DC's, DNS, DHCP, etc all is located at one location with some 200 worldwide sites being childern in the forest. The problem is I have a server support manager who is a mainframe guy and doesn't have a clue about intel or bascially AD as a whole. He has instructed me to look into the possibly of having these site admins getting the ability to have just "read" access in DNS. I have found KB atricles and tried a lot but nothing works. Test user gets read access, but also the ability to create new host records, etc. I have to say, I'm part of the infrastructure team and this is against our wishes BIG TIME. Even MS says this is not a good idea but yet our manager is caving in to these sites cuz that's what he does all the time. So, bascially, does anyone know of any 3rd party tool DNS managment tools that lets admin peak into DNS but not have the ability to do anything? Any help is greatly appreciated.

I hope that someday we will be able to put away our fears and prejudices and just laugh at people ~ Jack Handy

 

[ShackDaddy]

I've used VitalQIP in the past for this sort of thing. You can give read access to zones to specific users. It's an enterprise tool with a price tag though.

For more tools, see this page:

http://www.dns.net/dnsrd/tools.html

ShackDaddy

 

[Houserocker]

thanks ShackDaddy, VitalQIP looks like it'll do the trick. I'll see if we can get a copy for our test lab and go from there. Did you have any limitations or did you think it did the trick of giving read access to the enviroment for specific users? Any helps is greatly appreciated.

I hope that someday we will be able to put away our fears and prejudices and just laugh at people ~ Jack Handy

 

[ShackDaddy]

I was on the receiving end of read access... ;-)

One reason I moved on to a new job. I liked being in a position to fix things.