What does Windows error code 9992 (DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The DNS policy contains an invalid IPv4/IPv6 network-protocol criterion.

Previous	Next
DNS_ERROR_POLICY_INVALID_CRITERIA_TRANSPORT_PROTOCOL	DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE

DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL

DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL means the policy’s IP-version criterion is not valid. This criterion is about IPv4 versus IPv6 query traffic, not the IP address stored in an A or AAAA record.

What to verify

Check the network-protocol criterion and its operator in the policy definition.
Verify that the intended behavior is not better expressed by a client-subnet criterion.
Test from IPv4 and IPv6 clients separately after changing the rule.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Get-DnsServerQueryResolutionPolicy

Looking for a different code? Search another status or error code.