In order to update Windows-based Active Directory-Integrated DNS records, the account specified must be a domain user account with appropriate permissions. If you are not using Windows-based DNS (that is, if you are using the /altdns switch), a domain user account is not required.