Objective:
Grant permissions to the BranchAdmins group to manage the fabikam.com DNS zone on DC1.
Step-by-Step Guide
✅ Step 1: Log in to the DNS Server
Log in to DC1 (which hosts the DNS zone fabikam.com) using an account with Domain Admin or Enterprise Admin rights.
✅ Step 2: Open the DNS Manager
Open DNS Manager:
Press Windows + R, type dnsmgmt.msc, and hit Enter.
✅ Step 3: Locate the Zone
In the DNS Manager, expand the Forward Lookup Zones.
Locate and right-click on the zone fabikam.com.
✅ Step 4: Open Zone Properties
Right-click on fabikam.com and select Properties.
In the Properties window, go to the Security tab.
✅ Step 5: Grant Permissions
In the Security tab, click Add.
Enter the name of the group:
nginx
Copy
BranchAdmins
Click Check Names to resolve the group.
Click OK.
✅ Step 6: Assign the Appropriate Permissions
In the Permissions window, select the BranchAdmins group.
Assign the following permissions:
Read
Write
Create All Child Objects
Delete All Child Objects
Optionally, click Advanced for more granular control if needed.
✅ Step 7: Apply and Close
Click Apply and OK to save the changes.
