We have a DHCP scope dedicated to guest wireless, employee and visitor personal devices that are on and off the network for short periods. The scope is configured with 1 hour DHCP lease times.
DHCP is configured according to these recommendations: https://blogs.msmvps.com/acefekay/2016/08/13/dynamic-dns-updates-how-to-get-it-to-work-with-dhcp-scavenging-static-entries-their-timestamps-the-dnsupdateproxy-group-and-dhcp-name-protection/
That looks good for our own domain-joined devices that we may need to connect to by name and therefore need working DNS for, but isn't needed for all these devices we don't manage.
There is no way to scavenge DNS records to match the short, 1 hour leases and I don't see any reason we need to clutter our DNS with useless entries for people's iPhones and visitor's laptops.
How can we block these devices from ever getting posted into our DNS, so neither the device nor DHCP creates DNS entries?