Although I do have some installations where the clients update their DNS records on the DC and then the stub-zones in Unbound are configured with 'stub-no-cache: yes' so that queries are always forwarded. This is mainly for maintenance convenience as those systems are not acting as any type of server.