MS Active Directory and DNS and Bind 4TH Edition

[Martin McCormick]

	The Book DNS and Bind 4TH Edition describes 3 architectures
for supporting Microsoft's Active Directory with bind-based DNS.

	The architecture they recommended most highly was one in which
the Active Directory controllers are allowed to update the top-level
AD zone plus the 6 special sub zones that are required.  The dhcp
server dynamically handles the A records for individual work stations
in the AD domain.

	I understand that bind9.3 can now use GSS-tsig signatures which is
what MS DNS's use.

	What has this development changed about the suggested
architecture?  Is the method recommended as best practice still valid?

Thank you.

Martin McCormick WB5AGZ  Stillwater, OK 
OSU Information Technology Division Network Operations Group