Bes last contact time not updating
Is it the computer account of the client (PC123$), the DHCP server, or the service account you configured?Because secure updates are enabled, only the owner of the record can update it.
So are the records being scavenged before DHCP has an opportunity to refresh them? Run a dcdiag on your DC as an overall health check?
At the same time, I'm combing through AD and rationalizing group memberships.
The Dns Update Proxy group, despite its description, had a domain admin account and the BES Service Account as members.
DHCP is set as follows: Enable DNS dynamic updates - always dynamically update DNS A and PTR records.
Discard A and PTR records when lease is deleted Dynamically update for DHCP clients that do not request updates As far as my understanding goes (which is clearly not far enough), DHCP should update DNS as soon as it itself updates.