FreeBSD 10.1 amd64 Samba 4.1.17 BIND 9.10 Bind using DLZ module and dynamic updates. All seems fine, when client connects to network, IP added to DNS. But at /var/log/messages error appears: Apr 6 13:53:55 apus named[377]: client 192.168.1.38#51013: update 'sdr.tld/IN' denied
Seems this situation is appearing when client try to do unsecure DNS update. After I set secure updates only in GPO errors disappeared.