Hi, community. I made a DNS policy for subnet, zone scope and added record type A. My A record, made above, resolving on client from subnet, it's OK. But while policy enabled, that client can't resolving other records in domain. Appears error: *** UnKnown can't find name.my_domain.com: Non-existent domain Did like these: Add-DnsServerClientSubnet -Name "Subnet_name" -IPv4Subnet "10.10.10.200/30" Add-DnsServerZoneScope -ZoneName “my_domain.com” -Name “ZoneScope_name” Add-DnsServerResourceRecord -ZoneName “my_domain.com” -A -Name “A_record_name” -IPv4Address "10.10.10.201" -ZoneScope “ZoneScope_name” Add-DnsServerQueryResolutionPolicy -Name “Policy_name” -Action ALLOW -ClientSubnet “eq,Subnet_name” -ZoneScope “ZoneScope_name,1” -ZoneName “my_domain.com” –PassThru What i did wrong?

If you have other records in the same domain zone and you only want a single record to use the policy, you will need to create a record based policy not a zone policy. Try using the -fqdn option rather than the -zonescope option on Add-DnsServerQueryResolutionPolicy.

Problems with DNS policy

Accepted answer

Gary Reynolds 9,401 Reputation points

2023-09-16T01:20:30.5+00:00

If you have other records in the same domain zone and you only want a single record to use the policy, you will need to create a record based policy not a zone policy. Try using the -fqdn option rather than the -zonescope option on Add-DnsServerQueryResolutionPolicy.
Please sign in to rate this answer.

1 person found this answer helpful.
Nick Tuktarov 25 Reputation points

2023-09-18T12:11:15.9666667+00:00

Hi Gary. Thank you for advice, it help me to solve problem.

But only one thing, PowerShell return error if using the -fqdn option rather than the -zonescope. Need use both options.

And one more question, about NS record type. Is it possible to make policy, which will do same, as in first question, only for NS record. I want separate subnets clients resolve one name server to different ip addresses.

Gary Reynolds 9,401 Reputation points

2023-09-18T12:54:17.14+00:00

Have a look at this response which I think is the same. https://learn.microsoft.com/en-us/answers/questions/782295/my-dnsserverqueryresolutionpolicy-problem. I haven't tried setting a policy on NS records but the ns record type is supported - https://learn.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverresourcerecord?view=windowsserver2022-ps.

Judikael Nedev 0 Reputation points

2024-06-12T16:13:52.8166667+00:00

Hello,

I think I have a similar problem

I have 2 internal subnet, and on those I want some of my records to have a differents IP Addresses resolved.

But my default ZoneScope contains all other Records and I also want them to be resolved in this subnet.

How can I prioritize response for a record on a certain subnet?

When I create my InternalZoneScope with my specifics Records for my Internal clients, all other records of my defaut ZoneScope are not resolved (RESPONSE "Non-Existent domain")

I tried to write different ZoneScopes on my QueryResolutionPolicy

Like
Add-DnsServerQueryResolutionPolicy -Name "Internal1_ResolutionPolicy" -ZoneName "primary.zone" -ClientSubnet "eq,Internal1_Subnet" -ZoneScope "Internal1_ZoneScope,1;primary.zone,1" -ProcessingOrder 1 -PassThru

And I also Tried with changing weights value but It's just switching between the 2 ZoneScopes.

The only thing that I have now to make this work is copying an HOSTS file on all my internal client but I would prefer managing this in my DNS Server Directly
Sign in to comment

Share via

Problems with DNS policy

0 additional answers