What does Windows error code 9985 (DNS_ERROR_POLICY_PROCESSING_ORDER_INVALID) mean?

 
Previous Next
DNS_ERROR_INVALID_CLIENT_SUBNET_NAME DNS_ERROR_POLICY_SCOPE_MISSING

DNS_ERROR_POLICY_PROCESSING_ORDER_INVALID

DNS_ERROR_POLICY_PROCESSING_ORDER_INVALID means the requested processing order cannot be accepted. Policy order affects which applicable rule DNS evaluates first, so an invalid order can produce unexpected answers or prevent the policy from being created.

What to verify

  • List the existing policies at the same level and record their order before inserting a new rule.
  • Place narrow exceptions before broader catch-all rules when that is the intended design.
  • Test the actual client query paths after changing order, not only the policy object.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Looking for a different code? Search another status or error code.