I've seen a similar thing ("and they'll stop it at some point"). If you need DNS functionality beyond the Samba implementation then I would suggest having a se

I've seen a similar thing ("and they'll stop it at some point"). If you need DNS functionality beyond the Samba implementation then I would suggest having a separate BIND or PDNS server that all clients point at and that collates the DNS view that you wish them to have. A GPO will get them to update records on your Samba DNS and your PDNS or BIND or whatever can do the rest.