I am trying to set up our new local DNS Server within AD to handle internal DNS requests only. We currently use our ISP’s DNS server IP’s. I have received conflicting advice about the use of forwarders, some say put ISP DNS IP’s as forwarders – no problem. The security and best practice advice is to not use recursion but if I turn this off it automatically disables forwarders in Server 2008R2! How do I handle this?