Solution

A plugin for MS Internet Explorer that is checking the AD bit in a DNS answer coming from an validating DNS resolver (such as BIND, Windows 2008R2 DNS or Unbound) is developed by ITESM Campus Monterrey and NIC Mexico and can be found at
http://cs.mty.itesm.mx/dnssecmx/index.php/user-guide