Friday, July 25, 2014

windows server 2008 - Allow a non-admin user to modify CNAME records in a limited domain under DNS zone

We're running a Windows DNS (Server 2008, Active Directory) on our network. I have created domains under our zone for each of our web developers, and configured an A record under that domain.



While I can easily add CNAME records for sub-domains under a developer domain, I'd like the developers to be able to configure those for themselves - that way, they can generate new CNAMEs for new projects when they need to without bothering me.



For example:



Zone

- company.supernet.net.au

Developer domain
- frank.company.supernet.net.au

Developer subdomain (entered as CNAME for developer domain)
- redesign.frank.company.supernet.net.au
- project.frank.company.supernet.net.au



Is there an easy way to allow this? I tried searching, but all I get is instructions on how to create a CNAME from the DNS administration directly. I don't want to give all of our developers full access to the server if it can be avoided.

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...