you need to ensure that only domain members can register dns records in the zone