What does Windows error code 9992 (DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL) mean?

 
Previous Next
DNS_ERROR_POLICY_INVALID_CRITERIA_TRANSPORT_PROTOCOL DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE

DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL

DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL means the policy’s IP-version criterion is not valid. This criterion is about IPv4 versus IPv6 query traffic, not the IP address stored in an A or AAAA record.

What to verify

  • Check the network-protocol criterion and its operator in the policy definition.
  • Verify that the intended behavior is not better expressed by a client-subnet criterion.
  • Test from IPv4 and IPv6 clients separately after changing the rule.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Get-DnsServerQueryResolutionPolicy

Looking for a different code? Search another status or error code.