Why is the allow only secure dynamic updates option greyed out?

The "Allow only secure dynamic updates" option may be greyed out if the DNS server is not configured to support Active Directory or if the server is not a Domain Controller. Additionally, if the DNS zone is not set to allow dynamic updates at all, this option will be disabled. To enable it, ensure that the DNS server is integrated with Active Directory and that the zone settings permit dynamic updates.