What does Windows error code 9983 (DNS_ERROR_POLICY_MISSING_CRITERIA) mean?

 
Previous Next
DNS_ERROR_POLICY_INVALID_NAME DNS_ERROR_INVALID_CLIENT_SUBNET_NAME

DNS_ERROR_POLICY_MISSING_CRITERIA

DNS_ERROR_POLICY_MISSING_CRITERIA means the policy lacks the match conditions needed to decide when it applies. A policy that cannot distinguish its target queries should not be enabled as a catch-all by accident.

What to verify

  • Define the smallest set of criteria that expresses the intended rule, such as client subnet, FQDN, interface, transport protocol, or query type.
  • Test the policy with a representative query before broadening its scope.
  • Check whether a server-level policy or a zone-level policy is the correct place for the intended condition.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Split-brain DNS with DNS Policies

Looking for a different code? Search another status or error code.