What does Windows error code 9994 (DNS_ERROR_POLICY_INVALID_CRITERIA_FQDN) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The DNS policy contains an invalid fully qualified domain name criterion.

Previous	Next
DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE	DNS_ERROR_POLICY_INVALID_CRITERIA_QUERY_TYPE

DNS_ERROR_POLICY_INVALID_CRITERIA_FQDN

DNS_ERROR_POLICY_INVALID_CRITERIA_FQDN means the FQDN match condition in the policy is not valid. DNS Policy uses the queried name, so the condition must express the intended name or wildcard pattern correctly.

What to verify

Check the FQDN criterion for an invalid name, incorrect wildcard use, or a mismatch with the zone being evaluated.
Determine whether the policy must match one name or an entire subtree.
Test a matching and a non-matching query after the correction to avoid unintentionally changing unrelated answers.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Split-brain DNS with DNS Policies

Looking for a different code? Search another status or error code.