Allow a user to create/change records in 2008 R2 DNS

Hi,
We currently have a 2008 R2 domain with two AD servers running DNS. I want to grant permission to a regular user to be able to create/modify records on the DNS server for the primary domain (company.com).
I have done some reading but everything keeps pointing to a zone delegation, which sounds overly complex and I am not sure it is what I want to do (I don't want a sub-domain).
I think the DNSAdmins group will give them too much control over the server (change forwarders, etc..).
I somehow managed to do this on a 2003 server DNS setup, but when I look at the security tabs for both the domain and the server, I cannot find any mention of the user who is able to create records, so I am not sure what I did to get this working.
Can someone please clarify how I might be able to go about accomplishing this task.
Thanks in advance!

I think the DNSAdmins group will give them too much control over the server (change forwarders, etc..).
Create a custom MMC snapin and assign related permissions. The picture below may give you an idea:
Mahdi Tehrani   |  
  |  
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Similar Messages

  • Allow every user to create subfolders

    Hello everybody,
    after some changes in our internal role system I need your help.
    In BEX there you can go to
    open query or open workbook.
    Then hit the button "Roles"
    There we can see the menu with all visible folders.
    How can I allow every user to create subfolders within the folders he is already allowed to see?
    As I activate a certain role even I (administrator) gets a greyed out view.
    Is there a way that users can create new folders in a convenient way?
    Thanks for your help!
    Harry

    I think the DNSAdmins group will give them too much control over the server (change forwarders, etc..).
    Create a custom MMC snapin and assign related permissions. The picture below may give you an idea:
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • Allowing a user to create/drop tables in another users schema

    We have a central shared schema (TEAM). So we can monitor who is doing what users have there own login(USER1, USER2...). Is there a way to allow a user to create/drop objects in another user.
    I.e.
    SQL> connect USER1
    SQL> create team.table1(col1 char(1));
    SQL> drop table team.table1:
    How can this be set up?
    Ben

    Here is what you can do, If you want to keep track of what users are doing.
    Open the glogin.sql file and set the spool like this
    spool /oracle/audit/SID_&_user.logEverytime user logs in it will be populated and you will be able to see who is doing what.
    You can remove the write permission on glogin.sql so that no one can modify it.
    You also need to create a script like this, which would rename it every time same user would login.
    #!/bin/ksh
    time=`date +"%b"_"%d"_"%H"_"%M"`
    ##you need to pass some more variables and while loop to include all the users## ( This is just for an example)
    if [ -f /oracle/audit/SID_SYS.log ]
    then
    mv /oracle/audit/SYS.log /oracle/audit/SYS.log.$time
    fiEdit the glogin.sql file with this script information like this
    host /oracle/audit/file.kshHope this helps, if you need more information let me know.

  • How to allow a user to create his workspace in java(swings)

    hello guys ..
    i have to develop an interface (GUI) where i allow the user to create his own workspace , could anybody tell me what is the code we need. are there any specific inbuilt functions and methods..
    please help
    Imran

    public class Workspaceextends javax.swing.JPanelimplements org.jivesoftware.smack.PacketListener
    The inner Container for Spark. The Workspace is the container for all plugins into the Spark install. Plugins would use this for the following:
    Add own tab to the main tabbed pane. ex.
    Workspace workspace = SparkManager.getWorkspace(); JButton button = new JButton("HELLO SPARK USERS"); workspace.getWorkspacePane().addTab("MyPlugin", button);
    Retrieve the ContactList.

  • Privilege to allow a user to create a view in another user's schema

    Hello,
    I need to allow a user to create a view in another user's schema.
    Say, to connect as USER_A and run statement: 'create view USER_B_SCHEMA.myview as select...'
    Is there any way to accomplish that without granting USER_A privilege to CREATE ANY VIEW? I want to keep USER_A at the lowest profile possible.
    Thanks!

    You have the option to create an stored procedure, here a test case (no optimized, no bug free):
    SYS@orcl > create user sp_owner identified by sp_owner;
    SYS@orcl > grant create any view to sp_owner;
    SYS@orcl> create procedure sp_owner.create_view (
      2  view_name varchar2, view_sql varchar2 ) is
      3  begin
      4    execute immediate 'create view '||view_name||' as '||view_sql;
      5  end;
      6  /
    Procedure created.
    SYS@orcl > create user test identified by test;
    SYS@orcl > grant create session to test;
    SYS@orcl > grant execute on sp_owner.create_view to test;
    TEST@orcl> execute sp_owner.create_view('scott.emp_vw','select * from scott.emp')
    PL/SQL procedure successfully completed.HTH
    Enrique
    PS. If your problem was solved, consider marking the question as answered.

  • Restricting User from creating new records using when-validate-record

    Hi,
    I have a requirement for which I have to restrict he user from creating a record in the Supplier Master form if the suppliier type is 'Affiliate Supplier'.
    I have done the following setups
    Seq 10
    Description Restricting user from creating Affiliate records
    Level Function
    Enabled Yes
    Condition:
    Trigger Event WHEN-VALIDATE-RECORD
    Trigger object VNDR
    Condition "${item.VNDR.VENDOR_TYPE_DISP_MIR.value} is NOT NULL
    and
    ${item.VNDR.VENDOR_TYPE_DISP_MIR.value} LIKE 'Affiliate%'
    Processing Mode BOTH
    Context
    Level User
    Value User Name
    Action Sequence 1
    Type Message
    Action Description Saving Affiliate record
    Language ALL
    Message Type Show
    Message Text You Cannot Create Affiliate records Here
    Action Sequence 2
    Type Builtin
    Action Description Stop Proceesing
    Language ALL
    Action Enabled Yes
    Builtin Type RAISE FORM_TRIGGER_FAILURE;
    This is working good on one instance but when I moved it to another instance
    when I query the form and try to navigate to the bank accounts tab of the form which is based on a differnt block i.e VNDR_USES block, the when-validate-record trigger fires there also and stops the processing.
    Any suggestions on this would be higly appriciated.
    Thanks in Advance.

    Hi Srini,
    Yes, it does work...but in a Form Session if i Create more then one Item, in some cases it fires for the first records and not sleeps for the second.
    Sometimes it doesn't give any response.
    Appreciated if you divert to the link to check the Pacthes for 11.5.10 on Form Personalization.
    Please share any ideas/example if yiou have to achieve the below requirement.
    Requirement:
    Once New record is created , a Custom Procedure should be invoked.
    with out closing Form i am able to create n number of Items, so for every Item it should invoke Custom PLSQL Code on Save.
    Let me know if i can achieve the same in Custom.pll .....as i can use either of Options.(Form Personalization/Custom.pll)
    Thanks & regards,
    Edited by: user632004 on Mar 16, 2010 7:50 PM
    Edited by: user632004 on Mar 16, 2010 8:09 PM

  • Allowing end-user to create a user using a form

    Hi all,
    I'm working on a project whereby I must allow end-users from anywhere to create an account for themselves (Register).
    Which table/object should I create a form on to enable users to register.
    (APEX 3.1.2)
    kind regards
    Mel

    Hi Mel,
    I just set up custom authentication for the last application I developed. The user table is pretty simple and you can easily hash the passwords. I even developed a process where a person can change their own password and the process email them of any such changes. Course, that requires an email address to be a column in the user table.
    There is a relatively new Apex book out titled Pro Oracle Application Express. It has a lot of good information concerning custom authentication. It takes you through the whole process, step by step. Also, the book is excellent in itself and definitely worth having. It has a lot of good information in it.
    Tony (not Tony Miller, another Tony, he he)

  • Want to know the user who created conditin record for Batchaes. T-Code VCH1

    Can any one help me to find out the user who created the condition record for batches T-Code VCH1

    I got the answer, we need to go to strategy record slect it and next select selection criteria and environment--->change document.
    It gives u the change log information for the condition record.

  • Allowing a user to save changes

    I am creating an app that is something similar to this one:-
    http://demo.quietlyscheming.com/DragTile/DragDrop.html
    However what I want is when a user drags an item from one tilelist into the other tilelist for them to be able to save these changes so that when they close the application and reopen it these changes will still be there i.e. if the top tilelist is tilelist1 and the bottom tilelist is tilelist2 and the user drags a couple of items to tilelist1 TO tilelist2 I want these items to appear in tilelist 2 after the app has been closed and reopened and the items that have been moved NOT to appear in tilelist 1 anymore.
    I also want the user to be able to type their name into a text area and save it by clicking a save button so their name will also be shown next time they open the app.
    What is the best way to do this? Via xml perhaps? I've used xml to contain data that populates a site in the past but never used it where it allows user's to actually insert data into an xml file. Are there any examples of anything simiar that may help me out?

    That may work but I'm not sure on how to apply it to my own application. Here's a little bit of my code to show you what I mean. The button marked "populate" populates the left hand tilelist when clicked and also acts as a reset button if the user wants to reset the links back to normal. What I want is when the button marked "save" is clicked for all the changes a user has made to both tilelists to be saved. How can the following code be edited to allow that:-
    <?xml version="1.0" encoding="utf-8"?><mx:WindowedApplication 
    xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute">
    <mx:Script>
    <![CDATA[
    import mx.collections.*; 
    private function profile1NewsAndSportReset():void {profile1NewsAndSportAddLinksTilelist.dataProvider =
    new ArrayCollection([{link:
    "www.bbcnews.com", label:"BBC News", icon:"image7", largeImage:"assets/images/bbcnews_small.png", title:"BBC News", description:"BBC News description will go here"},{link:
    "www.itv.com/", label:"ITV", icon:"image5", largeImage:"assets/images/itv_small.png", title:"ITV", description:"ITV Description will go here"},{link:
    "www.skynews.com", label:"Sky News", icon:"image10", largeImage:"assets/images/skynews_small.png", title:"Sky News", description:"Sky News Description will go here"},]);
    profile1NewsAndSportLinkChoice.dataProvider =
    new ArrayCollection([]);}
    ]]>
    </mx:Script>
    <mx:Button click="profile1NewsAndSportReset()" id="pop" label="populate tilelists" y="0"/>
    <mx:TileList id="profile1NewsAndSportLinkChoice" fontWeight="bold" dragEnabled="true" dragMoveEnabled="true" dropEnabled="true" height="292" width="650" top="0" left="521" columnCount="5" rowHeight="145" columnWidth="125" doubleClickEnabled="true" backgroundColor="#000000" borderColor="#FFFFFF" color="#FFFFFF" borderSides="top right left"/> 
    <mx:TileList id="profile1NewsAndSportAddLinksTilelist" fontWeight="bold" dragEnabled="true" dragMoveEnabled="true" dropEnabled="true" height="419" width="385" top="0" left="128" columnCount="3" rowHeight="145" columnWidth="125" doubleClickEnabled="true" backgroundColor="#000000" borderColor="#FFFFFF" color="#FFFFFF" borderStyle="solid" borderThickness="2" dropShadowEnabled="true"/>
    <mx:Button click="" id="save" label="Save Changes" x="0" y="30"/>
     </mx:WindowedApplication>

  • How do you allow a user to create a new password?

    The way i have it set up right now the users are registered by the admin and a random password is provided for them to log in. When they login they're instructed to create a new password.
    They click to update their information. Included in this form is an "Old Password" field and a "New Password" field. They can choose if they want to create a new one or not. So I don't want to make it a requirement.
    1 - How do I validate the old password.
    2 - When they type the new password and submit the update info form. It inserts the new record over the old. But only after confirming that that old password is correct. How is this done?
    Or should they just type in a new password with no validation that they know the old. ? Hm.
    Please let me know. Thank you.
    Eddie Adolf

    Hi frunsel,
    if the user choose a name where already exist, the error throws out, but it clears all the register fields (all the users entrys, and i have a few fields)
    humm, that´s not cool -- however...
    how can i prevent this?
    In this case I suggest providing a separate "check username availabilty" procedure in a blank window
    (or a popup window, if you prefer) which ...
    a) on page 1 has a form with one "check_username" text field, and on...
    b) page 2 queries the login table´s "username" column against the textfield´s value and returns "username available" when no matching records were found, respectively "username already allocated" in case of a match.
    That´s something I´d do without using ADDT, means DW´s native database related functionality are absolutely sufficient for such simple stuff
    Cheers,
    Günter Schenk
    Adobe Community Expert, Dreamweaver

  • Allow other users to create subfolders in Public w/ correct permissions?

    Hi,
    I have a Public sub-folder called "Shared" which is set with permissions Everyone: Read & Write. Everyone in my workgroup should be able to have full access control to content in this folder.
    This works great, except when someone else creates a subfolder, so that there is a structure like:
    Public > Shared > Widgets
    If I create the Widgets folder and save a document into it, it has the correctly propagated permissions (Everyone: Read & Write). However, if someone else in my workgroup creates the Widgets folder and saves a document into it, it has incorrectly propagated permissions (Everyone: Read Only).
    Is there a way to adjust my settings so that Read & Write applies not only to documents within "Shared", but to any subfolders that "everyone" creates?

    More like:
    *$ chmod +a "everyone allow addfile,add_subdirectory,file_inherit,directoryinherit" /Users/Shared*
    See http://www.afp548.com/article.php?story=20050506085817850&mode=print for more details.

  • Properties of an answer field allowing form users to create a table

    When using Acrobat XI, is it possible to set the properties of the answer field to allow users to put in a table as an answer?

    Create the table in aanother program Such as word  then save. Then fill in the table items.
    Check this out: http://www.screencast.com/t/FxCNROO5AQj

  • Restrict Form & Reports Pages but allow users to Save their Records

    Hi
    I have a database with Forms & editable Reports pages.
    I have also created a table with certain 'Admin Levels' of access so that users with the 'ADMIN_LEVEL' = 1 cannot access the editable reports pages.
    I find that applying the below restriction stops those users from accessing the reports but also won't allow those users to save any records.
    select USER_ID
    from USERS
    where USER_ID=:APP_USER
    and ADMIN_LEVEL > 1
    I then thought I could create a new page of the report but make it uneditable & use the 'Create' button to save the record to the table, but this doesn't work.
    My question is, how can I restrict access to a reports page but still allow records from restricted users to be saved?
    Thanks

    Hi,
    Firstly, you should look into Authorization Schemes: [http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#BABCAGAB]
    I would suggest you create a scheme to identify admin users called, say, ADMIN_USER. This could be an EXISTS SQL query scheme of something like:
    SELECT 1
    FROM USERS
    WHERE UPPER(USER_ID) = UPPER(v('APP_USER'))
    AND ADMIN_LEVEL = 1Then, on any item within your application, you have an Authorization Scheme setting. You can then set this to either "ADMIN_USER" or "{not}ADMIN_USER" to determine which user can have access to that item. "{not}ADMIN_USER" is any user where the above query would return no records.
    Using this, you could grant access to a page, but stop access to a button and/or process. You don't, for example, have to set a scheme for the page itself (you can leave the setting as "- No Authorization Required -", so everyone can get to the page), but you can then set a Scheme for a button on that page. If the user is an ADMIN_USER and you have set a button for {not}ADMIN_USER, that user won't get the button on the page (you should also make the same setting on any process that this button triggers).
    But, if you set the page's Scheme to {not}ADMIN_USER, any ADMIN_USER will not even be able to get to the page.
    Andy

  • Allowing user to create link to a network file

    Is there a way to allow the user of a form to enter the path to a local network file (such as a Word document), so that when others click it, it will take them to the file?
    In a thread in another forum, someone posted the following method of create a button containing the following code that converts text entered into a text field into a hyperlink:
    if (xfa.host.name != "XFAPresentationAgent")
        var oURI = xfa.resolveNode("form1.page1.header.TextField2").rawValue;
        var oLink = "<body xmlns=\"http://www.w3.org/1999/xhtml\" xmlns:xfa=\"http://www.xfa.org/schema/xfa-data/1.0/\"><p style=\"letter-spacing:0in\"><a href=\"" + oURI+ "\" style=\"margin-top:0pt;margin-bottom:0pt;text-valign:bottom;font-fami ly:'Myriad Pro';font-size:8pt\">" + oURI + "</a></p></body>";
        xfa.resolveNode("form1.page1.header.TextField2").value.exData.loadXML (oLink, false, true);
    This works great for internet URLs; however, when you enter a local or network path (for example "Y:\Network\File.doc"), you get the following error message in your default browser:
    Firefox doesn't know how to open this address, because the protocol (y) isn't associated with any program.
    How would you alter this code so that it links to a local or network file, and doesn't try to open it in a web browser? Or, if this isn't possible, is there any other way to allow the user to create a clickable link to a file?
    Thanks,
    Jo

    I've never tried it and there may be alternative ways of doing it, but I would think the only way you can provide formatting tools - without recreating each tool - is to use an Applet.
    What you're trying to do is create a document object on the server, have the user select an command on the client side (such as underlining text), have the client pass the command back to the server, and echo the results of that operation, right?
    It would be incredibly awkward and impractical to do that through a conventional stateless HTTP medium such as JSPs, PHP or JavaScript. It may have been done before, I'm just not aware of any attempts to do so.
    Are you willing to consider alternative third-party solutions, open source or not? Or is this something that you explicitly have to code?

  • Best way to allow user to create JFrame

    Hi,
    I'm working on a part of an application that needs to allow a user to create some type of "Frame". I'll give an example: when you use an IDE an create a JFrame you can drag object to the frame until your happy with it. I you like to do something similar, obviously much more simple than an IDE.
    I have been looking at some libraries, specially XML - SWING, but not sure if its the best solution. I don't want to reinvent the wheel. So anything that could help, is more than welcome.
    thanks.

    I may not have explained myself well here.
    I want to only allow the operator to select sequences that are set up to be able to run independently. I don't want the callbacks and initialization sequences to show up in the list the operator can choose from.
    The way I figured out how to do it is a little tricky, and I think I may have found a bug.
    This is what I did:
    For the sequences I do not want to be selectable, I setPropFlags_Hidden to true. (Sequence Properties...Advanced...Flags, check the box).
    This immediately hides the sequence. In order to see all hidden sequences to edit them, set Configure->Station Options...Preferences->Show Hidden Properties.
    I wanted to set this up automatically for the sequence file, so I added a SequenceFileLoad callback to set ThisContext.RunState.Engine.StationOptions.ShowHiddenProperties = False, and a SequenceFileUnload callback to set it back to true.
    The bug I think I found:
    This solution works when I open the sequence file in the editor, but not when I use the simple operator interface. The simple operator interface will show the hidden sequences, but only the unhidden sequences show up in the RUN_SEQUENCE control. If I make sure the station is configured not to show hidden properties BEFORE I run the simple operator interface, then the hidden sequences are indeed hidden in the Sequences list (except, because I hid MainSequence, the first list entry shows up blank until I select one of the unhidden sequences).
    (see also
    http://forums.ni.com/t5/NI-TestStand/Ignore-a-Sequence-in-a-SequenceCall/m-p/1754984/highlight/false...)

Maybe you are looking for