What does Windows error code 9990 (DNS_ERROR_POLICY_INVALID_CRITERIA_CLIENT_SUBNET) mean?

DNS_ERROR_POLICY_INVALID_CRITERIA_CLIENT_SUBNET

DNS_ERROR_POLICY_INVALID_CRITERIA_CLIENT_SUBNET means the policy cannot use the supplied client-subnet criterion. The referenced name, operator, or criterion format is not valid.

What to verify for DNS_ERROR_POLICY_INVALID_CRITERIA_CLIENT_SUBNET

• List client subnets and verify the exact name exists on the target server.
• Check the policy criterion syntax and logical operator.
• Confirm that the client IP ranges are expressed as the intended IPv4 or IPv6 prefixes.

Get-DnsServerClientSubnet
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"

Microsoft: Add-DnsServerClientSubnet

Microsoft: Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Where the result is returned

This result is Win32 system error 9990 (0x00002706) from winerror.h. AllStat describes it as “The criterion client subnet provided in the policy is invalid.”