Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows 2000
    - Admin Tips
      - DHCP and DNS
        Grant DNS admin start / stop service rights

Section(s): DHCP and DNS
Published on Apr 20, 2004.
Last Modified on Apr 20, 2004.
Last Modified by Wayne Maples.
Rated 2.8 out of 5 based on 6 votes.

On news groups I see lots of discussion centering around granting admin access to DNS services. This is usually couched in an arguement about whether unix admins should or should not have admin access to the DNS service. If you do that, you give them admin access to everything. What you can do is give the DNS admins the right to start / stop the DNS services through Group Policy objects. Open the GPO for the server's container:

Computer Configuration
Windows Settings
Security Settings
System Services
DNS Server
check Define this policy setting
click the Edit Security button.

There you can set security for the service, specifically which group or users have the right to start/stop/pause the service. Delegation of authority is the fundamental advance W2K has over NT.