Miscellaneous

I have been seeing some weird behavior with ldap labels and wanted to see if someone can help me with it. I have a few labels that search through several OU's in AD and label machines based on that criteria. When i first set it up they worked flawlessly. I'd go to "no label" and it'd be empty and all machines were neatly labeled. As far as i know only thing that changed is we upgraded domain functional level to 2016 few days ago. No changes in k1000.

Today i noticed machines without labels. If i force Inv on those machines they get labeled and go away. The no label category fluctuates between 80 and 120 machines, so the number is always changing. Has anyone seen this before and how do I correct it so that it stay as it has before?