Sounds like your clients have a secondary DNS server configured alongside Pi-Hole resulting in sometimes ads not being blocked because the other DNS server is asked for resolution who doesnt know of any blacklists ?
Check DNS servers assigned on clients with (for Windows):