Test Diagram

graph LR DNSClient --> WindowsDNSServer --Forward unknown queries to Azure--> AzureDNS WindowsDNSServer --Conditionally Forward ad.domain.com domain queries to DC's-->ADDNSServers