Join Active Directory Domain wont create DNS record
So, the answer is combination is Andys and Mikhail solutions. with SSSD when you allow Win DNS Nonsecure updates and you set
dyndns_update=true
in your /etc/sssd/sssd.conf Your DNS records will be created and properly maintained. Seems its working fine for me right now.