diff --git a/lwbase/include/lw/winerror.h b/lwbase/include/lw/winerror.h
index 551a7707a..7c598287f 100644
--- a/lwbase/include/lw/winerror.h
+++ b/lwbase/include/lw/winerror.h
@@ -2292,6 +2292,7 @@
 #define DNS_ERROR_RCODE_BADSIG 9016
 #define DNS_ERROR_RCODE_BADKEY 9017
 #define DNS_ERROR_RCODE_BADTIME 9018
+#define ERROR_DOMAIN_BLACKLISTED 9500
 #define DNS_INFO_NO_RECORDS 9501
 #define DNS_ERROR_BAD_PACKET 9502
 #define DNS_ERROR_NO_PACKET 9503
diff --git a/lwbase/src/error-table.h b/lwbase/src/error-table.h
index cd4439d7a..fb1ecff4d 100644
--- a/lwbase/src/error-table.h
+++ b/lwbase/src/error-table.h
@@ -2855,6 +2855,7 @@ S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_ERROR_RCODE_NOTZONE, -1, "The name used in
 S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_ERROR_RCODE_BADSIG, -1, "" )
 S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_ERROR_RCODE_BADKEY, -1, "" )
 S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_ERROR_RCODE_BADTIME, -1, "" )
+S ( LW_STATUS_MESSAGE_NOT_FOUND, ERROR_DOMAIN_BLACKLISTED, -1, "Could not reach the DC, it has been blacklisted." )
 S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_INFO_NO_RECORDS, -1, "" )
 S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_ERROR_BAD_PACKET, -1, "A bad packet was received from a DNS server. Potentially the requested address does not exist." )
 S ( LW_STATUS_MESSAGE_NOT_FOUND, DNS_ERROR_NO_PACKET, -1, "" )
diff --git a/netlogon/server/api/lwnet.c b/netlogon/server/api/lwnet.c
index 543e45368..5068ad0ef 100644
--- a/netlogon/server/api/lwnet.c
+++ b/netlogon/server/api/lwnet.c
@@ -894,7 +894,7 @@ LWNetSrvGetDCNameDiscoverInternal(
 
     if (!dwServerCount)
     {
-        dwError = DNS_ERROR_BAD_PACKET;
+        dwError = ERROR_DOMAIN_BLACKLISTED;
         BAIL_ON_LWNET_ERROR(dwError);
     }