Unable to correct/remove DNS zones

Question

_{Friday, May 26, 2017 12:39 PM}

I recently found 3 DNS zones that have a replication scope set to "All domain controllers in this domain (for Windows 2000 compatibility) and I am trying to change them to "all DNS servers running on domain controllers in this domain). When trying to make that change I receive an error that states "The replication scope could not be set...The name limit for the local computer network adapter card was exceeded".

I followed several online suggestions including looking at ADSI and finding several InProgress entries. I was unable to delete those when I got an error stating "Operation failed. Error code: 0x5 Access is denied...". I tried to delete it from the DNS Manager console and got "The zone cannot be deleted. Access was denied". 

What's odd about the inability to delete it is that when I check effective permissions for the items DNSAdmins has Full Control (including delete), but when I check effective permissions for my creds (which is a member of DNSAdmins) I don't have Full Control, Delete, or Delete Subtree

All replies (4)

_{Monday, May 29, 2017 10:32 AM ✅Answered}

Hi,

>>What's odd about the inability to delete it is that when I check effective permissions for the items DNSAdmins has Full Control (including delete), but when I check effective permissions for my creds (which is a member of DNSAdmins) I don't have Full Control, Delete, or Delete Subtree

1.Please remove your account from DNSAdmins and join it again.

2.Check your account whether denied in the ACL.

3. Separately join your account  to ACL.

check your permission correctly.

If there is any other concern, please don’t hesitate to let me know.

Best Regards,

Frank

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, May 30, 2017 12:09 PM ✅Answered | 1 vote}

Thanks...it prompted me to dig further. What happened was that 'Everyone' was listed with Special Permissions. When I looked into it, it was set to deny delete. Sometimes it's the simplest things...

_{Wednesday, May 31, 2017 8:04 AM}

Hi,

I am glad to hear that your issue was successfully resolved. If you haven't any other problems to solve, please mark the useful answer to help other community members find the helpful reply quickly. 

Best Regards,

Frank

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, June 5, 2017 8:19 AM}

Hi,

Was your issue resolved?

If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.

If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

If no, please reply and tell us the current situation in order to provide further help.

Best Regards,

Frank

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].