Yeah, if we could enable forest-replicated DNS zones I wouldn't even have to think about this. As it stands now I think the solution is to set the child DC's to forward to our dat center child DC ...