W
walt771
Hi all,
Hopefully this is an easy fix, but I am getting to resolution that it isn't. And I am not even sure I am in the right channel but most my queries brought me to here. So here is the problem I am facing hopefully I can get some feedback, any suggestions will help.
1. We have a Windows 2012 R2 DC that is also the DNS server, this server had the security settings when you right-clicked Properties of the DNS zone <Contoso.local> get changed.
2. What got changed was the Security for the group PreWindows 2000 Compatible Access (Contoso\PreWindows 2000 Compatible Access)
- It was changed from Special Permission to Deny Access... and now when we go to open the DNS manager it on that server it gives us the message THE SERVER <Name of Server> Could not be contacted
The error was: Access Denied
Would you Like to Add the server anyway?
You select yes.... and the server gets added but all it shows is the Event Log, you are unable to bring up any of the DNS records. And also the DNS server itself still functions like it should, just we are unable to open up the DNS manager on the server itself. We got a couple Event ID:4520 and Event ID: 4521 in Event Manager early in the occurrence, but otherwise nothing since then.
I am thinking it might take a rebuild of the DNS zone but was hopping not, wanted to ask you guys before I proceeded with that, as guess, is there a way to restore the security settings to a zone back to defaults?
Continue reading...
Hopefully this is an easy fix, but I am getting to resolution that it isn't. And I am not even sure I am in the right channel but most my queries brought me to here. So here is the problem I am facing hopefully I can get some feedback, any suggestions will help.
1. We have a Windows 2012 R2 DC that is also the DNS server, this server had the security settings when you right-clicked Properties of the DNS zone <Contoso.local> get changed.
2. What got changed was the Security for the group PreWindows 2000 Compatible Access (Contoso\PreWindows 2000 Compatible Access)
- It was changed from Special Permission to Deny Access... and now when we go to open the DNS manager it on that server it gives us the message THE SERVER <Name of Server> Could not be contacted
The error was: Access Denied
Would you Like to Add the server anyway?
You select yes.... and the server gets added but all it shows is the Event Log, you are unable to bring up any of the DNS records. And also the DNS server itself still functions like it should, just we are unable to open up the DNS manager on the server itself. We got a couple Event ID:4520 and Event ID: 4521 in Event Manager early in the occurrence, but otherwise nothing since then.
I am thinking it might take a rebuild of the DNS zone but was hopping not, wanted to ask you guys before I proceeded with that, as guess, is there a way to restore the security settings to a zone back to defaults?
Continue reading...