On Fri, 26 Apr 2019 14:17:57 -0600 durwin at mgtsciences.com wrote: > It did not occur to me the AD had to be authoritative. However,I > thought if DNS server could not find a record in it's database, it > would query a 'Forward' server. > Every AD DC that runs a dns server (that means every Samba AD DC) is authoritative for the dns domain. Rowland