Hi, community. I made a DNS policy for subnet, zone scope and added record type A. My A record, made above, resolving on client from subnet, it's OK. But while policy enabled, that client can't resolving other records in domain. Appears error: *** UnKnown can't find name.my_domain.com: Non-existent domain Did like these: Add-DnsServerClientSubnet -Name "Subnet_name" -IPv4Subnet "10.10.10.200/30" Add-DnsServerZoneScope -ZoneName “my_domain.com” -Name “ZoneScope_name” Add-DnsServerResourceRecord -ZoneName “my_domain.com” -A -Name “A_record_name” -IPv4Address "10.10.10.201" -ZoneScope “ZoneScope_name” Add-DnsServerQueryResolutionPolicy -Name “Policy_name” -Action ALLOW -ClientSubnet “eq,Subnet_name” -ZoneScope “ZoneScope_name,1” -ZoneName “my_domain.com” –PassThru What i did wrong?

If you have other records in the same domain zone and you only want a single record to use the policy, you will need to create a record based policy not a zone policy. Try using the -fqdn option rather than the -zonescope option on Add-DnsServerQueryResolutionPolicy.

Problems with DNS policy

Accepted answer

Gary Reynolds 9,416 Reputation points

2023-09-16T01:20:30.5+00:00

If you have other records in the same domain zone and you only want a single record to use the policy, you will need to create a record based policy not a zone policy. Try using the -fqdn option rather than the -zonescope option on Add-DnsServerQueryResolutionPolicy.
Please sign in to rate this answer.

1 person found this answer helpful.
Nick Tuktarov 25 Reputation points

2023-09-18T12:11:15.9666667+00:00

Hi Gary. Thank you for advice, it help me to solve problem.

But only one thing, PowerShell return error if using the -fqdn option rather than the -zonescope. Need use both options.

And one more question, about NS record type. Is it possible to make policy, which will do same, as in first question, only for NS record. I want separate subnets clients resolve one name server to different ip addresses.

Gary Reynolds 9,416 Reputation points

2023-09-18T12:54:17.14+00:00

Have a look at this response which I think is the same. https://learn.microsoft.com/en-us/answers/questions/782295/my-dnsserverqueryresolutionpolicy-problem. I haven't tried setting a policy on NS records but the ns record type is supported - https://learn.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverresourcerecord?view=windowsserver2022-ps.

Judikael Nedev 0 Reputation points

2024-06-12T16:13:52.8166667+00:00

Hello,

I think I have a similar problem

I have 2 internal subnet, and on those I want some of my records to have a differents IP Addresses resolved.

But my default ZoneScope contains all other Records and I also want them to be resolved in this subnet.

How can I prioritize response for a record on a certain subnet?

When I create my InternalZoneScope with my specifics Records for my Internal clients, all other records of my defaut ZoneScope are not resolved (RESPONSE "Non-Existent domain")

I tried to write different ZoneScopes on my QueryResolutionPolicy

Like
Add-DnsServerQueryResolutionPolicy -Name "Internal1_ResolutionPolicy" -ZoneName "primary.zone" -ClientSubnet "eq,Internal1_Subnet" -ZoneScope "Internal1_ZoneScope,1;primary.zone,1" -ProcessingOrder 1 -PassThru

And I also Tried with changing weights value but It's just switching between the 2 ZoneScopes.

The only thing that I have now to make this work is copying an HOSTS file on all my internal client but I would prefer managing this in my DNS Server Directly
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Problems with DNS policy

0 additional answers

Your answer