How come they all have to act like they know the answer - got told today that a client can't resolve DNS with MS DNS unless the Zone is added to the Domain server - I dont know but it doesn't make sense to me. 50 -50 this turns out to be BS and the vPN isn't configured right