What does Windows error code 9973 (DNS_ERROR_POLICY_INVALID_CRITERIA) mean?

 
Previous Next
DNS_ERROR_POLICY_DOES_NOT_EXIST DNS_ERROR_POLICY_INVALID_SETTINGS

DNS_ERROR_POLICY_INVALID_CRITERIA

DNS_ERROR_POLICY_INVALID_CRITERIA means the policy criteria cannot be parsed or are not valid as a combination. DNS policy criteria are a logical combination of client subnet, server interface, FQDN, IP protocol, transport protocol, time of day, and query type.

What to verify

  • Review the criterion syntax and logical operators instead of changing the policy action first.
  • Validate each named client subnet, interface address, scope, and FQDN independently.
  • Start with one criterion in a test policy, then add conditions incrementally.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Get-DnsServerClientSubnet

Looking for a different code? Search another status or error code.