locked
DNS Server - Access Denied RRS feed

  • Question

  • Good Day,

    My Old DC crashed, I still have 2 GC servers I am now trying to add another DC, but when I try and setup the DNS role on one of the exsiting servers, I get access denied.

    Any assistance would be appreciated.

    Friday, January 3, 2014 8:45 AM

Answers

  • Hi,

    This might be due to a missing domain naming master server but I need more information about where exactly you see this error. Also please provide the full text of the error including any error codes.

    If the domain naming master is missing, you can try to seize this role. First you should try to determine if and where it exists.

    http://blogs.technet.com/b/mempson/archive/2007/11/08/how-to-find-out-who-has-your-fsmo-roles.aspx

    http://technet.microsoft.com/en-us/library/cc738540.aspx

    Thanks,

    -Greg

    • Proposed as answer by Susie Long Thursday, January 9, 2014 1:38 AM
    • Marked as answer by Susie Long Monday, January 13, 2014 1:45 AM
    Friday, January 3, 2014 8:50 PM
  • Hi,

    Anything updates?

    In general, only a member of an elevated group such as DNS Admins, Domain Admins, or Enterprise Admins has the ability to use the DNS Management MMC to view a Windows DNS server. Please also make sure that you have sufficient privileges to access the DNS console.

    In addition, you can modify the permissions on the MicrosoftDNS object in AD restart the DNS Server service to make the changes take effect. 

    Best regards,

    Susie

    • Proposed as answer by Susie Long Thursday, January 9, 2014 1:38 AM
    • Marked as answer by Susie Long Monday, January 13, 2014 1:45 AM
    Monday, January 6, 2014 3:32 AM

All replies

  • Hi,

    This might be due to a missing domain naming master server but I need more information about where exactly you see this error. Also please provide the full text of the error including any error codes.

    If the domain naming master is missing, you can try to seize this role. First you should try to determine if and where it exists.

    http://blogs.technet.com/b/mempson/archive/2007/11/08/how-to-find-out-who-has-your-fsmo-roles.aspx

    http://technet.microsoft.com/en-us/library/cc738540.aspx

    Thanks,

    -Greg

    • Proposed as answer by Susie Long Thursday, January 9, 2014 1:38 AM
    • Marked as answer by Susie Long Monday, January 13, 2014 1:45 AM
    Friday, January 3, 2014 8:50 PM
  • Hi,

    Anything updates?

    In general, only a member of an elevated group such as DNS Admins, Domain Admins, or Enterprise Admins has the ability to use the DNS Management MMC to view a Windows DNS server. Please also make sure that you have sufficient privileges to access the DNS console.

    In addition, you can modify the permissions on the MicrosoftDNS object in AD restart the DNS Server service to make the changes take effect. 

    Best regards,

    Susie

    • Proposed as answer by Susie Long Thursday, January 9, 2014 1:38 AM
    • Marked as answer by Susie Long Monday, January 13, 2014 1:45 AM
    Monday, January 6, 2014 3:32 AM