In our environment the DNS records of clients disappear after 10-40 minutes after the client switched the network (mostly from WLAN to LAN).
The scavenging no-refresh and refresh interval is 7 days on the zone.
What I noticed in the DNS Log of the DC is that around the time the DNS disappears the following logs are recorded. Client1 is the DNS that disappears and is the IP-Address of the DHCP.
09.10.2018 11:07:38 13A4 PACKET 0000002CFC354240 UDP Rcv 172.18.16.167 1884 Q [0001 D NOERROR] SOA (8)Client1(7)contoso(5)intra(0)
09.10.2018 11:07:38 13A4 PACKET 0000002CFC354240 UDP Snd 172.18.16.167 1884 R Q [8085 A DR NOERROR] SOA (8)Client1(7)contoso(5)intra(0)
09.10.2018 11:07:38 13A4 PACKET 0000002CFC3EA0B0 UDP Rcv 172.18.16.167 d3d4 U [0028 NOERROR] SOA (7)contoso(5)intra(0)
09.10.2018 11:07:38 098C PACKET 0000002CFC3EA0B0 UDP Snd 172.18.16.167 d3d4 R U [05a8 REFUSED] SOA (7)contoso(5)intra(0)
09.10.2018 11:07:38 13A4 PACKET 0000002C8115E090 UDP Rcv 172.18.16.167 b77e U [0028 NOERROR] SOA (7)contoso(5)intra(0)
We already checked the most ususal causes described in "Cumulative list of reason that DNS records disappear from DNS zones"
All Server are 2012R2 and the clients Windows 7
Windows 10 had a similiar problem which was related to the patchKB2655960 and is fixed now.
Any idea what could be the cause for the Problem?