| Previous | Next |
| DNS_ERROR_POLICY_DOES_NOT_EXIST | DNS_ERROR_POLICY_INVALID_SETTINGS |
DNS_ERROR_POLICY_INVALID_CRITERIA
DNS_ERROR_POLICY_INVALID_CRITERIA means the policy criteria cannot be parsed or are not valid as a combination. DNS policy criteria are a logical combination of client subnet, server interface, FQDN, IP protocol, transport protocol, time of day, and query type.
Validate each criterion separately, then rebuild the logical combination. This makes it easier to distinguish an invalid value from a combination that DNS Policy does not permit even though its individual pieces look valid.
What to verify
- Review the criterion syntax and logical operators instead of changing the policy action first.
- Validate each named client subnet, interface address, scope, and FQDN independently.
- Start with one criterion in a test policy, then add conditions incrementally.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnetMicrosoft: Add-DnsServerQueryResolutionPolicy
Looking for a different code? Search another status or error code.