Windows error 9963 (DNS_ERROR_SCOPE_ALREADY

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: A DNS policy scope with the supplied name already exists.

Previous	Next
DNS_ERROR_SCOPE_LOCKED	DNS_ERROR_POLICY_ALREADY_EXISTS

DNS_ERROR_SCOPE_ALREADY_EXISTS

DNS_ERROR_SCOPE_ALREADY_EXISTS means the operation tried to create a duplicate policy scope. A scope can exist even when it is not currently used by an enabled policy.

Retrieve the existing scope and compare its configuration with what the deployment intended to create. Reuse or modify the correct object rather than deleting it solely because an idempotent provisioning script attempted creation again.

What to verify

List existing scopes and policies before creating a replacement.
Check whether the existing scope is referenced by a disabled or staged policy.
Use a new name only when it represents a genuinely different response set or policy behavior.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: Get-DnsServerZoneScope

Microsoft: DNS Policies overview

Looking for a different code? Search another status or error code.