What does Windows error code 9952 (DNS_ERROR_ZONESCOPE_DOES_NOT_EXIST) mean?

DNS_ERROR_ZONESCOPE_DOES_NOT_EXIST

DNS_ERROR_ZONESCOPE_DOES_NOT_EXIST indicates that a policy or administrative operation refers to a zone scope that is absent from the named zone.

List the scopes inside the named zone and verify the policy references the correct zone as well as the correct scope. The same scope name in another zone is a different configuration object and will not satisfy the reference.

What to verify

• Check the zone name and scope name together; a scope belongs to one specific zone.
• Compare the policy configuration with the scopes present on this DNS server.
• If the server is secondary, make sure scope-related zone data has reached it before enabling a policy that depends on the scope.

Get-DnsServerZoneScope -ZoneName "example.com"
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"

Microsoft: Get-DnsServerZoneScope

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: DNS Policy for geo-location traffic