I found exactly what I needed ...

http://support.microsoft.com/?id=295328

For anyone else who needs it!

"Ryan Faricy" <ryan@faricy.net> wrote in message
news:eOmOu2o5GHA.2264@TK2MSFTNGP02.phx.gbl...
> So everyone, I've spent hours scouring the net and haven't really come up
> with a definitive answer.
>
> I have:
> - a static IP from a local ISP
> - DSL through local telco, with router
> - Two boxes: 1) Win2K box, IP=10.0.0.2, w/ IIS, DNS, AD, and it's a PDC
> ... 2) is a mail server (Win2003 server), member of domain FARICY.NET,
> which is on box 1.
>
> Everything works GREAT. I only have one problem.
>
> I set up DNS on box 1 with primary zone FARICY.NET which is AD integrated
> and allows dynamic updates. Router forwards all traffic from 53 to box 1
> for resolution.
>
> FARICY.NET contains all proper information needed to run my web services
> and works great. EXCEPT ... AD insists on updating the zone with
> (same as parent folder) HOST 10.0.0.2 ............. *in addition* to what
> I REALLY want (to be the default at least) is:
> (same as parent folder) HOST my.public.ip.address
>
> They are both there, so I have two entries for FARICY.NET...
> @ IN A 10.0.0.2
> @ IN A my.public.ip.address
>
> Whenever I run an nslookup, it always returns two results:
> Non-authoritative answer:
> Name: faricy.net
> Addresses: my.public.ip.address, 10.0.0.2
>
> Unfortunately, when I try to ping or visit faricy.net via local DNS or
> after it propogates to my ISP, etc,, it tries to resolve 10.0.0.2.
>
> Is there ANY way I can stop AD from messing with just this particular
> entry?? Or any recommended solution?
>
> I would be very grateful!!! Thank you so much.
>