DNS Resolver (dig)

Check your CNAME and TXT records when configuring your DNS records.

CNAME records...

Please note: Even though you can select multiple flags, not all flag combinations are supported by Active Directory.
(Please refer to the official documentation for more details) 

Active Directory is a registered trademark of Microsoft Corporation. For further information on the "userAccountControl" flags, please see the official "UserAccountControl property flags - Windows Server" documentation provided by Microsoft.