The only topics I can find on dnscmd.exe access denied are all "when we upgraded to Server 2008 this error started". Well, I'm using Windows XP client and Server 2003 and getting this error. I can use computer manager to view sessions, open files, services (start/stop works also) from my XP workstation, but when I try to use the DNS Manager snap-in or dnscmd.exe I always get Access Denied (5) error. I have confirmed that RPC over TCP/IP is enabled for the DNS service (when I disable I get a connection reset error instead).
More info on setup:
Windows 2003 Standard Edition SP2 Computer Name: PSServer Workgroup Name: TELEXSI
Workstation using dnscmd.exe:
Windows XP Pro SP3 Computer Name: DEVELOPER Workgroup Name: TELEXSI
DNS command-lines tried:
dnscmd.exe mydomain.com /Info
Also tried using the IP (it is an external/Internet IP) instead of domain name.
In computer manager when I view the list of active sessions, I see my XP workstation listed (by its external IP) and the user name is a user in the admin group, and not as guest. This is the one and only login we use for everything, start/stop services, install software, etc, so I know it has full-access/admin rights.
Is this a known restriction of a Workgroup over WAN? Seems odd that I can do everything else remotely, but this one area (DNS Server) I am having issues with.