Add Windows Server 2003 built-in delegation for DnsAdmins

entrysky · May 26, 2022 · 85f3afe · 85f3afe
1 parent 6c06e14
commit 85f3afe
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/adeleg/builtin_delegations.json b/adeleg/builtin_delegations.json
@@ -71,6 +71,12 @@
         "access_mask": 983423,
         "builtin": true
     },
+    {
+        "trustee": { "sam_account_name": "DnsAdmins" },
+        "resource": { "dn": "CN=MicrosoftDNS,CN=System,DC=*" },
+        "access_mask": 983551,
+        "builtin": true
+    },
     {
         "trustee": { "sid": "S-1-5-32-561" },
         "resource": { "dn": "CN=AdminSDHolder,CN=System,DC=*" },