What does Windows error code 9992 (DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The DNS policy contains an invalid IPv4/IPv6 network-protocol criterion.

Previous	Next
DNS_ERROR_POLICY_INVALID_CRITERIA_TRANSPORT_PROTOCOL	DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE

DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL

DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL means the policy’s IP-version criterion is not valid. This criterion is about IPv4 versus IPv6 query traffic, not the IP address stored in an A or AAAA record.

Check the accepted IP-version values for the policy command and compare them with the traffic you intend to match. Do not substitute record type or transport protocol, which are separate DNS Policy criteria.

What to verify

Check the network-protocol criterion and its operator in the policy definition.
Verify that the intended behavior is not better expressed by a client-subnet criterion.
Test from IPv4 and IPv6 clients separately after changing the rule.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Get-DnsServerQueryResolutionPolicy

Looking for a different code? Search another status or error code.