What does Windows error code 9988 (DNS_ERROR_SERVERSCOPE_IS_REFERENCED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The server-level DNS scope cannot be removed because a DNS policy references it.

Previous	Next
DNS_ERROR_POLICY_SCOPE_NOT_ALLOWED	DNS_ERROR_ZONESCOPE_IS_REFERENCED

DNS_ERROR_SERVERSCOPE_IS_REFERENCED

DNS_ERROR_SERVERSCOPE_IS_REFERENCED prevents a server-level policy scope from being removed while an active or stored DNS policy still references it.

What to do for DNS_ERROR_SERVERSCOPE_IS_REFERENCED

Locate every policy that uses the server scope before attempting deletion.
Update dependent policies in a controlled change, then verify that the intended queries still receive an answer.
Do not force deletion: it can leave the policy configuration inconsistent.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Get-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Add-DnsServerQueryResolutionPolicy

Where the result is returned

This result is Win32 system error 9988 (0x00002704) from winerror.h. AllStat describes it as “The server scope cannot be deleted because it is referenced by a DNS Policy.”. The code is useful only together with the API that failed, because multiple Windows components can reuse system-error values while imposing different retry and cleanup rules.

Diagnostic sequence

Call GetLastError immediately after the failing API and save this result, the function name, all relevant flags, and the target path, handle, service, device, account, or policy object.
Capture the component log that owns the dns / serverscope / is / referenced operation and retain the original numeric value before a framework converts it to an HRESULT or exception.
compare preconditions with the API documentation and reproduce with a minimal request before changing system-wide configuration.

Retry this result only after the resource or state named in “The server scope cannot be deleted because it is referenced by a DNS Policy.” has changed. For invalid parameters, unsupported formats, missing objects, policy restrictions, and access failures, correct the input or configuration instead of immediately repeating the same call.

Looking for a different code? Search another status or error code.