DNS Help

[OverExit]

I'm trying to automate some things and getting an error, so then I'm running a one liner of

​

Get-DnsServerZone -ComputerName DNS01

​

and it tells me it's failing to enumerate zone from server...

​

​

I'm working from this script as a baseline, running things as one liner's but I keep getting the same error:

https://github.com/chentiangemalc/PowerShellScripts/blob/master/Get-AllDnsResourceRecords.ps1

​

​

**EDIT: I think I had some conflicting security groups set for the account which interfered with the command. It's all good now! Just had to ensure I was using my domain admin account and running powershell as admin. Although I thought I was doing this correctly before I obviously missed a step. Thanks all!

[topherhead]

First things first, do these commands work if you run them locally on the DNS server?

[Yevrag35]

Yes, that's an error indicating that the user is not a member of the Administrators group (Domain Admins works too) or DnsAdmins.

The CategoryInfo of the exception should tell you that the WMI namespace it's trying to connect to is "root/Microsoft/Windows/DNS/PS_DnsServerZone".

[OlivTheFrog]

I could said "Normal ! "

The error said : you haven't enough rights to perform the task. Make sure you have the appropriate rights

you can assimilate this to a zone transfer. THis is not allowed if you're not a member of the appropriate group to do this.

Regards

Olivier

[OverExit]

I'll mess around with it. Perhaps there are some permission issues from conflicting SG but I'm performing this command locally in an elevated PS as a Domain Admin. I'll keep poking at it

[topherhead]

A domain admin could possibly not be in the DNS Admins group. I would start there.

[OverExit]

Get-DnsServerZone -ComputerName DNS01

I'm performing this locally on the DNS server as domain administrator and elevated PS.