Windows Server 2012 R2 AD CNAME not working on non-domain computers?

Question

Domain Name System

Good day.
I can't access the site, ping from a non-domain computer (server 2012 r2) to a CNAME
record : voip | voip.subdomain.domain.ru | ask.subdomain.domain.ru
When I try to log in from a computer connected to the domain, everything works, what did I forget to do?
The AD\DNS server is the DNS server for both domain computers and non-domain PCs.
So far a Google search has n't turned up any results.

Answer 1

1) Is it a typo

voip | viop .subdomain.domain.ru | ask.subdomain.domain.com

2) A non-domain computer (or a member of another domain) must specify the full name of the site (server) with a suffix, otherwise it will look for it in its domain zone.
3) The client does not receive data from DNS due to firewall settings on the server. Because DNS is located on the domain controller, it is likely that access is now allowed only from clients of the domain network. Output: Allow access to the service or port from public and private networks.

Answer 2

In general, it should be so if you have a default implementation of AD, and DNS is integrated into AD. Only domain users have read access to the directory.