HP StorageWorks Storage Mirroring Recover User's Guide (T5437-96008, November 2009)

645 of 739
DNS permissions for Windows 2003 SP1 or earlier
The following permissions are required to use the DNS Failover Utility to modify DNS
records on Windows 2003 with service pack 1 or earlier:
● The user must be a member of the DnsAdmins domain local group. For details,
see Assigning the user to the DnsAdmins group.
● The user must be a member of the Server Operator group, at the very least, to
Deny the source access to the records. The resource record security can be set
through the record properties within the DNSMgmt console. For details, see
Assigning the user to the Server Operator group.
● The user must be one of the following:
● A member of the Domain Admins group, or
● Granted Full Control on each of the individual DNS records that are
associated to the source IP and to be updated by the DNS Failover utility
(DFO.exe). For details, see Assigning Full Control on the WMI DNS
namespace.
Assigning the user to the DnsAdmins group
Follow these steps to add a user to the domain DnsAdmins group.
1. Select Start, Programs, Administrative Tools (Common), Active Directory
Users and Computers.
2. Right-click the DnsAdmins group and select Properties.
3. Select the Members tab.
4. To add a user to the group, click Add.
5. In Location, click the domain containing the users you want to add, then click OK.
6. In Name, type the name of the user you want to add to the group. If you want to
validate the user or group names that you are adding, click Check Names.
7. Click OK to close all open dialog boxes.
Assigning Full Control on the WMI DNS namespace
Follow these steps to assign appropriate permissions for the user for WMI control in the
domain where the DNS server resides.a
1. Click Start, Run, and type MMC. Click OK.
2. Select File, Add/Remove Snap-in.
3. Click Add and select WMI Control.
4. Click Add, then click Finish.
5. Click Close, then click OK.
6. Right-click WMI Control and select Properties.