FreeBSD 10.1 amd64
Bind using DLZ module and dynamic updates. All seems fine, when client connects to network, IP added to DNS. But at /var/log/messages error appears:
Apr 6 13:53:55 apus named: client 192.168.1.38#51013: update 'sdr.tld/IN' denied
Seems this situation is appearing when client try to do unsecure DNS update. After I set secure updates only in GPO errors disappeared.