I believe that that would be a BIND specific situation and allow-update or update-policy can be used, but both directives are "per zone". If you have two AD Domains that you want to enable dynamic update on, then yes.
But using BIND for AD in all honesty is quite painful. But if you must http://www.linux-mag.com/2001-03/bind_01.html Then read the unix haters handbook.(Not that I don't like Unix) http://research.microsoft.com/~daniel/uhh-download.html > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] > Sent: October 6, 2006 9:01 AM > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] BIND allow-update > > Easy question for the group - > > I have a forest rood domain: msroot.company > I have a domain: company.com > > We use BIND. My question: do I need an "allow-update" entry for both zones > or just the forest root zone for proper dynamic update operation? > > Thanks in advance, > James > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx