Home / server / Questions / 579076
Accepted
CWL
Asked: 2014-03-01 13:02:58 +0800 CST

DNS Record - CHange Current Owenership using Powershell

  • 772

In DNS I have some computers in the list where the current owner no longer exist so you see the sid info as the Current Owner. I like to change this to the machine_name$. Anyone know how to do this via powershell? You can only change to user/group using AD.
I have used the Add-QADPermission cmd but this does not change the ownership and have not been able to find anything that could. Thanks in advance

domain-name-system

1 Answers

  1. Best Answer
    Import-Module D:\Powershell\DNS\DnsShell
Import-Module ActiveDirectory
Add-PSSnapin Quest.ActiveRoles.ADManagement

# Retrieve records
$servers = get-content D:\Powershell\Scripts\DNSRECORDS.txt
$newarray = @()
foreach ($computer in $servers) {
    Get-ADDnsPartition | Get-ADDnsRecord | Where-Object {$_.Name -eq $Computer} | % {
        $RecordName = $_.Name
        $RecordName = "GTLAW\$RecordName" + '$'
        $RecordDN = (Get-ADObject –Identity $_.ObjectGUID).DistinguishedName
        $Owner = (Get-Acl -Path "ActiveDirectory:://RootDSE/$RecordDN").Owner
        If ($Owner -eq "$RecordName") {
            Write-Host 'Good |' $_.Name '|' $Owner
        } Else {    
            Write-Host 'Bad |' $_.Name '|' $RecordName $Owner 
            $AdACL = get-ACL ("AD:\" + $RecordDN)
            $ADobject = New-Object System.Security.Principal.NTAccount($_.NAME + "$")
            $sid = $ADobject.Translate([System.Security.Principal.SecurityIdentifier])
            $AdACL.SetOwner($sid)
            set-acl -path ("AD:\" + $RecordDN) -AclObject $AdACL
        }
    }
}
    • 1