Make a network captures of both IAD & the normal DNS request. Compare result as below snip. the only difference is : TYPE of the DNS request from IAD is SRV, but from the normal DNS request is A.
then we check the configuration by command "disaply current configuration" and found this line:
so the problem is clear --- customer make wrong configuration of the dns mode.