Assigning the user to the DnsAdmins group

Follow these steps to add a user to the domain DnsAdmins group.

1. Select Start, Programs, Administrative Tools (Common), Active Directory Users and Computers.
2. Right-click the DnsAdmins group and select Properties.
3. Select the Members tab.
4. To add a user to the group, click Add.
5. In Location, click the domain containing the users you want to add, then click OK.
6. In Name, type the name of the user you want to add to the group. If you want to validate the user or group names that you are adding, click Check Names.
7. Click OK to close all open dialog boxes.

Follow these steps to assign appropriate permissions for the user for WMI control in the domain where the DNS server resides.a

1. Click Start, Run, and type MMC. Click OK.
2. Select File, Add/Remove Snap-in.
3. Click Add and select WMI Control.
4. Click Add, then click Finish.
5. Click Close, then click OK.
6. Right-click WMI Control and select Properties.
7. Select the Security tab.
8. Double-click on Root to expand the tree.
9. Select MicrosoftDNS, then click the Security button.
10. Verify that the user is in the ACL list with the following permissions. If the permissions are not assigned, proceed to the next step.

• Execute Methods
• Full Write
• Partial Write
• Provider Write
• Enable Account
• Remote Enable
• Read Security

11. Click Add, then enter the login name for the user account that the DFO.exe command line will be using. If a different account is used to run DFO.exe from the target server, that account must have similar permissions.
12. Click OK to close all open dialog boxes.
13. Restart the Windows Management Instrumentation service.

Follow these steps to add a user to the servers Server Operator group.

1. Select Start, Programs, Administrative Tools (Common), Active Directory Users and Computers.
2. Click on Builtin.
3. Right-click the Server Operators group and select Properties.
4. Select the Members tab.
5. To add a user to the group, click Add.
6. In Location, click the domain containing the users you want to add, then click OK.
7. In Name, type the name of the user you want to add to the group. If you want to validate the user or group names that you are adding, click Check Names.
8. Click OK to close all open dialog boxes.

Follow the following procedure must be done on the DNS server to allow dfo.exe to be able to connect through WMI to alter the source server records.

1. Click Start, Run, and type wmimgmt.msc. Click OK.
2. Right-click WMI Control, then click Properties.
3. Click the Security tab.
4. Expand the Root folder, select the MicrosoftDNS folder, then click Security.
5. Click Add. Type the user or group name you wish to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
6. In the Permissions for User list, select the Allow checkbox next to the following permissions:

• Execute Methods
• Enable Account
• Remote Enable
• Read Security

7. Click Advanced. In the Permission entries list, select the user you added in step 12, then click Edit.
8. In the Apply onto box, click This namespace and subnamespaces.
9. Click OK four times.
10. Quit the WMI Control snap-in.
11. Click Start, Run, and type dcomcnfg.exe. Click OK.
12. Select Component Services and then expand it. Expand Computers. Right-click My Computer and select Properties.
13. Select the COM Security tab.
14. In the Access Permissions section, click Edit Limits.
15. Click Add. Type the user or group name you want to use in the Enter the object names to select box, click Check Names to verify your entry or entries, then click OK.
16. In the Permissions for User list, select the Allow checkbox next to the following permissions:

• Local Access
• Remote Access

17. Click OK.
18. In the Launch and Activation Permissions section, click Edit Limits.
19. Click Add. Type the user or group name you want to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
20. In the Permissions for User list, select the Allow checkbox next to the following permissions:

• Local Launch
• Remote Launch
• Local Activation
• Remote Activation

21. Click OK twice.
22. Expand My Computer and expand DCOM Config.
23. Right-click Windows Management and Instrumentation and click Properties.
24. Click the Security tab.
25. In the Access Permissions section, select Customize, then click Edit.
26. Click Add. Type the user or group name you want to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
27. In the Permissions for User list, select the Allow checkbox next to the following permissions:

• Local Access
• Remote Access

28. Click OK twice.
29. Close Component Services.
30. Restart the DNS/Domain Controller.

Follow these steps to add a user to the local Administrators group.

1. Select Start, Programs, Administrative Tools (Common), Active Directory Users and Computers.
2. Click on Builtin.
3. Right-click the Administrators group and select Properties.
4. Select the Members tab.
5. To add a user to the group, click Add.
6. In Location, click the domain containing the users you want to add, then click OK.
7. In Name, type the name of the user you want to add to the group. If you want to validate the user or group names that you are adding, click Check Names.
8. Click OK to close all open dialog boxes.