开发者

Rights for creating SRV records

In a Windows 2003 domain, I would like to create a SRV record programmatically at install time to advertise to clients where my server is located.

Since I do not have the luxury of running as Domain Admin, what kind of permissions do I need to have to create the SRV record?

Generally I'd be using the .NET classes to create the SRV record. I just don't want to go down the wrong archi开发者_开发技巧tectural path here.


Take a look at the System.Management-namespace. Here's blog post with a code sample to get you started.

Edit: Access Rights-related questions are problably best suited for serverfault.com but the quick answer is that there´s a built-in group in AD called DnsAdmins (in the Users-container). Members of this group have write access to DNS; so adding your service account to that group will allow your app to create SRV-records. (There's also the possibility of setting more explicit rights to DNS but that's a question for you domain admin to decide on. A compromised account which is a member of DnsAdmins can potentially cause a lot of security and reliability-related problems in the domain.)

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜