I added the DNSAdmins group per the following KB: http://support.microsoft.com/kb/837335 and I'm still getting access denied for members of the DNSAdmin group. I've tried all three suggested methods. I can see that the group has 'Full Control' on the root, but effective access on the zones and child objects show no rights for either the group or the members. I have also tried adding the group directly to the zone. Again, it doesn't appear to apply to the child objects. What would prevent the 'Full Control' from being inherited and how do I fix it?
There is another discussion here: http://social.technet.microsoft.com/Forums/en-US/a02414d0-ef00-4e6a-8a0e-c5af73a2aae5/access-denied-to-member-of-dnsadmins-group but I thought I might get more response in the Network Infrastructure forum.
Justin Cervero - MS Enterprise Admin - Appalachian State University