What does Windows error code 9961 (DNS_ERROR_INVALID_SCOPE_OPERATION) mean?

 
Previous Next
DNS_ERROR_DEFAULT_SCOPE DNS_ERROR_SCOPE_LOCKED

DNS_ERROR_INVALID_SCOPE_OPERATION

DNS_ERROR_INVALID_SCOPE_OPERATION means the requested change is not supported for the selected policy scope. The scope may be valid, but the action is not.

Identify the scope type and the exact management operation that rejected it. Use the cmdlet or API intended for that scope rather than recreating the object, because the name itself may be completely valid.

What to verify

  • Determine whether the command is intended for a zone scope, a server policy, or a zone policy.
  • Review the existing policy and scope type before changing records or policy criteria.
  • Use read-only inspection commands first, especially when the zone serves production clients.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: DNS Policies overview

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: Get-DnsServerZoneScope


Looking for a different code? Search another status or error code.