PermissionDenied: (PS_DnsServerPrimaryZone:root

Question

I am running into an issue when trying to use a service account that is NOT a domain admin to create dns forward lookup zones on a remote DC

I am getting the error below;

Invoke-Command -Session $session -ScriptBlock {

• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : PermissionDenied: (PS_DnsServerPrimaryZone:root/Microsoft/...rverPrimaryZone) [Add-DnsSe
  rverPrimaryZone], CimException
• FullyQualifiedErrorId : HRESULT 0x80041003,Add-DnsServerPrimaryZone
• PSComputerName : <REDACTED>

I have not been able to find where I need to add permissions to allow this.

CIMv2 permissions have been added
DNS permissions have been added
enable-pssession has been configured properly
ports are open
firewall is open
password is good

any ideas?

Answer 1

Add also Dns permissions under Microsoft of this service account.