What does Windows error code 9993 (DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The DNS policy contains an invalid server-interface criterion.

Previous	Next
DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL	DNS_ERROR_POLICY_INVALID_CRITERIA_FQDN

DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE

DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE means the server-interface condition in the DNS policy is invalid. Server interface criteria are useful when one DNS server answers differently depending on the interface that received the query.

What to verify

Confirm the server interface address used by the policy still exists and is bound to the DNS server.
Check the criterion syntax rather than substituting a client subnet; the two conditions match different parts of the query path.
Test queries through each relevant server interface after the policy is corrected.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: Split-brain DNS with DNS Policies

Microsoft: DNS Policies overview

Looking for a different code? Search another status or error code.