What does Windows error code 9974 (DNS_ERROR_POLICY_INVALID_SETTINGS) mean?

 
Previous Next
DNS_ERROR_POLICY_INVALID_CRITERIA DNS_ERROR_CLIENT_SUBNET_IS_ACCESSED

DNS_ERROR_POLICY_INVALID_SETTINGS

DNS_ERROR_POLICY_INVALID_SETTINGS is returned when the policy settings are not valid as a whole. The individual names may exist, but the chosen action, criteria, scope, or processing settings do not form a supported policy.

Export or retrieve the complete policy so criteria, action, scope, recursion behavior, and processing order can be reviewed together. Fix the incompatible combination instead of changing one valid field at random.

What to check

  • Review the policy action and every scope or weight referenced by it.
  • Compare the configuration with a documented scenario such as split-brain DNS or geo-location routing.
  • Use read-only cmdlets to capture the current policy before editing a working production policy.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: Split-brain DNS with DNS Policies

Microsoft: DNS Policy for geo-location traffic

Looking for a different code? Search another status or error code.