What does Windows error code 9959 (DNS_ERROR_SCOPE_DOES_NOT_EXIST) mean?

DNS_ERROR_SCOPE_DOES_NOT_EXIST

DNS_ERROR_SCOPE_DOES_NOT_EXIST means a policy operation references a scope that is not present at the required configuration level.

Confirm the configuration level and spelling of the referenced scope, then list scopes visible to the target policy. A scope with the same name at another level does not satisfy a reference to the missing object.

What to check

• Check whether the scope is server-level or zone-level; a name valid at one level is not automatically valid at the other.
• Validate the DNS server targeted by the command, especially in multi-server deployments.
• Review the policy before creating anything: the intended action and criteria may reveal that the wrong scope type was used.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: Get-DnsServerZoneScope

Microsoft: DNS Policies overview