A DNS zone that is stored in Active Directory and to which access control list (ACL) security features are applied.