What does Windows error code 9993 (DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE) mean?

 
Previous Next
DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL DNS_ERROR_POLICY_INVALID_CRITERIA_FQDN

DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE

DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE means the server-interface condition in the DNS policy is invalid. Server interface criteria are useful when one DNS server answers differently depending on the interface that received the query.

What to verify

  • Confirm the server interface address used by the policy still exists and is bound to the DNS server.
  • Check the criterion syntax rather than substituting a client subnet; the two conditions match different parts of the query path.
  • Test queries through each relevant server interface after the policy is corrected.
Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: Split-brain DNS with DNS Policies

Microsoft: DNS Policies overview

Looking for a different code? Search another status or error code.