Protect Active Directory by Protecting Microsoft DNS

Role based granular delegation over Microsoft DNS

One of the greatest challenges for large network environments with complex DNS infrastructure is enabling efficient and security-conscious delegation and distribution of DNS management tasks. Today access is granted at the zone level - meaning each administrator must be given rights over ALL DNS records. The risks and vulnerabilities of this all or nothing approach is that a single administrative mistake can render Active Directory and other applications/directories non-functioning and have a cascading negative effect on the organization.  The need to grant day-to-day administrators granular access to Domain Name Service (DNS) so they may only update DNS records for which they are responsible is critical to the protection and security of Active Directory.

Unlike the standard Microsoft tools that are well suited for performing individual management tasks by highly authorized and highly skilled personnel, ActiveRoles DNS Manager provides a scalable and secure DNS data management solution necessary for large network environments.

• Allows secure, efficient delegation of DNS data management tasks by providing role-based, fine-grained access control of DNS namespaces to multiple administrative levels.
• Featuring a powerful, easy to deploy and use Web-based console, ActiveRoles DNS Manager provides a convenient toolset that works with the current infrastructure without any redesign or migration.

ActiveRoles DNS Manager extends the capabilities of ActiveRoles Server to further protect and secure Active Directory with an enterprise DNS management solution for Microsoft DNS based environments. The solution works on top of your existing Microsoft DNS infrastructure, and addresses substantial challenges inherent in distributed DNS operations by providing a powerful, easy to deploy and use, web-based console that facilitates secure delegation and execution of DNS data management tasks. ActiveRoles DNS Manager leverages role-based delegation of control over Active Directory-integrated DNS objects, which allows you to granularly distribute DNS management tasks among administrative personnel based on the principle of least privilege, while reducing administrative costs by facilitating shared administrative responsibility.