AD records in BIND

[Jonathan de Boyne Pollard]

JS> I am not familiar with AD nor how the Domain Controller is setup
JS> to insert SRV and CNAME records into the BIND zone.  

Any non-trivial system will require secure Dynamic DNS updates.  
As such, you are subject to vendor lock-in.  

<URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-incompatible-secure-updates.html>