You need to ensure that only authenticated users are allowed to update host (A) records in the DNS zone
You need to perform a non-authoritative restore of the doman controller using an existing backup file
You need to use your client computers to edit domainbased GPOs by using the ADMX files that are stored in the ADMX central store