Control the mode of DNS-over-HTTPS: registry value DnsOverHttpsModeUserHKCU\Software\Policies\Microsoft\Edge

Policy ID: DnsOverHttpsMode
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Edge version 83, Windows 7 or later
Source: Microsoft Edge Policy Templates (version 155.0.4283.45)
Category: Microsoft Edge

Registry

DnsOverHttpsMode

REG_SZUserComputer

…\Software\Policies\Microsoft\EdgeHKCU\Software\Policies\Microsoft\Edge Current key
HKLM\Software\Policies\Microsoft\Edge

Enabled value: Depends on the option value
Element: Control the mode of DNS-over-HTTPS

Options
Item	Stored value
Disable DNS-over-HTTPS	off
Enable DNS-over-HTTPS with insecure fallback	automatic
Enable DNS-over-HTTPS without insecure fallback	secure

Apply with .reg · CMD · PowerShell

UserPer-account setting

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Edge]

; Options (use only one)
; Disable DNS-over-HTTPS
"DnsOverHttpsMode"="off"
; Enable DNS-over-HTTPS with insecure fallback
"DnsOverHttpsMode"="automatic"
; Enable DNS-over-HTTPS without insecure fallback
"DnsOverHttpsMode"="secure"

CMD

:: Options (use only one)

:: Disable DNS-over-HTTPS
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "off" /f
:: Enable DNS-over-HTTPS with insecure fallback
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "automatic" /f
:: Enable DNS-over-HTTPS without insecure fallback
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "secure" /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Force | Out-Null

# Options (use only one)
# Disable DNS-over-HTTPS
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DnsOverHttpsMode' -PropertyType String -Value 'off' -Force | Out-Null
# Enable DNS-over-HTTPS with insecure fallback
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DnsOverHttpsMode' -PropertyType String -Value 'automatic' -Force | Out-Null
# Enable DNS-over-HTTPS without insecure fallback
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DnsOverHttpsMode' -PropertyType String -Value 'secure' -Force | Out-Null

ComputerMachine-wide setting

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge]

; Options (use only one)
; Disable DNS-over-HTTPS
"DnsOverHttpsMode"="off"
; Enable DNS-over-HTTPS with insecure fallback
"DnsOverHttpsMode"="automatic"
; Enable DNS-over-HTTPS without insecure fallback
"DnsOverHttpsMode"="secure"

CMD

:: Options (use only one)

:: Disable DNS-over-HTTPS
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "off" /f
:: Enable DNS-over-HTTPS with insecure fallback
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "automatic" /f
:: Enable DNS-over-HTTPS without insecure fallback
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "secure" /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Force | Out-Null

# Options (use only one)
# Disable DNS-over-HTTPS
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DnsOverHttpsMode' -PropertyType String -Value 'off' -Force | Out-Null
# Enable DNS-over-HTTPS with insecure fallback
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DnsOverHttpsMode' -PropertyType String -Value 'automatic' -Force | Out-Null
# Enable DNS-over-HTTPS without insecure fallback
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DnsOverHttpsMode' -PropertyType String -Value 'secure' -Force | Out-Null