Configuring Non-Administrative Windows Accounts - Adaptive Applications - BlueCat Gateway - 22.7

BlueCat Overlay for Microsoft

Locale
English (United States)
Product name
BlueCat Gateway
Version
22.7

Windows Permissions

The non-administrative accounts must have access to DNS and DHCP services to read service data for synchronizing with BlueCat Overlay for Microsoft. You can configure these roles based on the requirements of your organization and how you are using BlueCat Overlay for Microsoft. Non-administrative accounts can be members of the following groups:
  • Member of DHCP administrators: Members of this group have the ability to manage all aspects of the DHCP server.
  • Member of DNS admins: Members of this group have the necessary rights and permissions to administer the DNS server.

This list of users groups is not exhaustive. You can configure user permissions using Built-In user groups or custom groups that allows the users to perform the necessary tasks.

Adding users to Member of DHCP administrators group

You can add users to Member of DHCP administrators group using the Windows Server command line or UI.

To add a user to Member of DHCP Administrators group using the command line:
  1. Log in to the Microsoft Windows Server as an administrator.
  2. From the Windows PowerShell, enter the following command:
    Add-ADGroupMember -Identity "DHCP Administrators" -Members <USER_NAME>

    Where <USER_NAME> represents the username of the user for commands to be executed in the session.

For more information on Active Directory group members, refer to https://docs.microsoft.com/en-us/powershell/module/activedirectory/add-adgroupmember

To add a users to Member of DHCP Administrators group using the UI:
  1. Log in to the Microsoft Windows Server as an administrator.
  2. Click Server Manager in the bottom left of the Windows desktop.
  3. Click the Tools menu in the top right of the screen and select Active Directory Users and Computers.
  4. Expand the domain that you are working with.
  5. On the right of the screen, double click the name of the user that would like to add to the DHCP Administrators group.
  6. Click the Member Of tab.
  7. Click Add.
  8. Within the Enter the object names to select field, enter DHCP Administrators.
  9. Select Check Names.
  10. Click OK when the check has completed.
  11. Click Apply and OK to finish.

Adding users to Member of DNS admins group

You can add users to Member of DNS admins group using the Windows Server command line or UI.

To add a user to Member of DNS Admins group using the command line:
  1. Log in to the Microsoft Windows Server as an administrator.
  2. From the Windows PowerShell, enter the following command:
    Add-ADGroupMember -Identity "DNSAdmins" -Members <USER_NAME>

    Where <USER_NAME> represents the username of the user for commands to be executed in the session.

For more information on Active Directory group members, refer to https://docs.microsoft.com/en-us/powershell/module/activedirectory/add-adgroupmember

To add a user to Member of DHCP Administrators group using the UI:
  1. Log in to the Microsoft Windows Server as an administrator.
  2. Click Server Manager in the bottom left of the Windows desktop.
  3. Click the Tools menu in the top right of the screen and select Active Directory Users and Computers.
  4. Expand the domain that you are working with.
  5. On the right of the screen, double click the name of the user that would like to add to the DNS Admins group.
  6. Click the Member Of tab.
  7. Click Add.
  8. Within the Enter the object names to select field, enter DNSAdmins.
  9. Select Check Names.
  10. Click OK when the check has completed.
  11. Click Apply and OK to finish.
Note: Non-admin users cannot perform the following actions:
  • In the Manage Servers page, non-admin users cannot add a new configuration name. Non-admin users are only allowed to use the existing configurations on the Windows server.
  • In the Manage DNS page, non-admin users cannot add DNS zones or DNS reverse zones.

For a list of errors that might be encountered while using BlueCat Overlay for Microsoft, refer to Troubleshooting.