[Samba] DNS Update denied

[Tom]

Hello,

I'm configuring a Samba AD DC and there is an Bind error with a windows 
7 member domain.

When I start the win7 client, in the named.run file I've this :

samba_dlz: starting transaction on zonedomain.com
client 172.x.y.z#56880: update 'domain.com/IN' denied
samba_dlz: cancelling transaction on zone domain.com
samba_dlz: starting transaction on zone domain.com
samba_dlz: allowing update of signer=win7pc\$\@DOMAIN.COM 
name=win7pc.domain.com tcpaddr= type=AAAA 
key=1148-ms-7.1-5408.45f6fed9-8e85-11e9-099e-d4bed99b32e7/160/0
samba_dlz: allowing update of signer=win7pc\$\@DOMAIN.COM 
name=win7pc.domain.com tcpaddr= type=A 
key=1148-ms-7.1-5408.45f6fed9-8e85-11e9-099e-d4bed99b32e7/160/0
samba_dlz: allowing update of signer=win7pc\$\@DOMAIN.COM 
name=win7pc.domain.com tcpaddr= type=A 
key=1148-ms-7.1-5408.45f6fed9-8e85-11e9-099e-d4bed99b32e7/160/0
client 172.x.y.z#60047/key win7pc\$\@DOMAIN.COM: updating zone 
'domain.com/NONE': deleting rrset at 'win7pc.domain.com' AAAA
client 172.x.y.z#60047/key win7pc\$\@DOAMIN.COM: updating zone 
'domain.com/NONE': deleting rrset at 'win7pc.domain.com' A
samba_dlz: subtracted rdataset win7pc.domain.com 'win7pc.domain.com. 
1200    IN    A    172.x.y.z'
client 172.x.y.z#60047/key win7pc\$\@DOMAIN.COM: updating zone 
'domain.com/NONE': adding an RR at win7pc.domain.com' A
samba_dlz: added rdataset win7pc.domain.com 'win7pc.domain.com. 1200    
IN    A    172.x.y.z'
samba_dlz: committed transaction on zone domain.com

update is denied but why ?

Precisions : Samba version is 4.10.4. Migrate to Bind after 
provisionning. CentOS is the OS. I'm using RSAT to manage AD

I begin in the samba AD world, so be understanding ;-)

Thanks,

Tom