What does Windows error code 9996 (DNS_ERROR_POLICY_INVALID_CRITERIA_TIME_OF_DAY) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The DNS policy contains an invalid time-of-day criterion.

Previous	Next
DNS_ERROR_POLICY_INVALID_CRITERIA_QUERY_TYPE	WSAEINTR

DNS_ERROR_POLICY_INVALID_CRITERIA_TIME_OF_DAY

DNS_ERROR_POLICY_INVALID_CRITERIA_TIME_OF_DAY means the time-window condition in the DNS policy is not valid. Time-based routing or filtering depends on a precisely formatted, unambiguous time range.

What to verify

Review the time-of-day criterion syntax and verify the server clock, time zone, and time synchronization.
Check boundaries that cross midnight and make the intended behavior explicit.
Test immediately before and after the intended time window, not only during a single successful query.

Get-DnsServerQueryResolutionPolicy
Get-DnsServerQueryResolutionPolicy -ZoneName "example.com"
Get-DnsServerClientSubnet

Microsoft: Add-DnsServerQueryResolutionPolicy

Microsoft: DNS Policies overview

Microsoft: Get-DnsServerQueryResolutionPolicy

Looking for a different code? Search another status or error code.