The default access control list (ACL) on the following Domain-DNS object class has been previously removed. All subsequently ...

The default access control list (ACL) on the following Domain-DNS object class has been previously removed. 
 
All subsequently created domain and application directory partitions will permit insecure access. 
 
User Action 
To secure access to domain and application directory partitions created in the future, revert the default security descriptor on the Domain-DNS object class in the schema back to the default setting.