Configure Discovery of Designated Resolvers (DDR) protocol
- Policy ID
- DNS_Ddr
- Scope
- Computer Configuration
- Supported on
- At least Windows 11 Version 23H2
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Network › DNS Client
Description
Specifies if the DNS client would use the DDR protocol.
The Discovery of Designated Resolvers (DDR) protocol allows Windows to move from unencrypted DNS to encrypted DNS when only the IP address of a resolver is known.
If you enable this policy, the DNS client will use the DDR protocol.
If you disable this policy setting, or if you do not configure this policy setting, the DNS client will use locally configured settings.
Registry
ComputerHKEY_LOCAL_MACHINE
- EnableDdrREG_DWORD