What does Windows error code 9989 (DNS_ERROR_ZONESCOPE_IS_REFERENCED) mean?

 
Previous Next
DNS_ERROR_SERVERSCOPE_IS_REFERENCED DNS_ERROR_POLICY_INVALID_CRITERIA_CLIENT_SUBNET

DNS_ERROR_ZONESCOPE_IS_REFERENCED

DNS_ERROR_ZONESCOPE_IS_REFERENCED means a zone scope is still used by a DNS policy. The server blocks deletion to prevent a policy from pointing to a response scope that no longer exists.

What to do

  • Identify the policy references at the relevant zone level.
  • Update the policy to another scope or remove the policy through a planned change before removing the scope.
  • Verify answers for clients previously matched to that scope after the configuration change.
Get-DnsServerZoneScope -ZoneName "example.com"
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: Remove-DnsServerZoneScope

Microsoft: Split-brain DNS with DNS Policies


Looking for a different code? Search another status or error code.