Control the mode of DNS-over-HTTPS

Policy ID
DnsOverHttpsMode
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Edge version 83, Windows 7 or later
Source
Microsoft Edge Policy Templates (version 155.0.4283.45)
Category
Microsoft Edge

Description

Control the mode of the DNS-over-HTTPS resolver. This policy only sets the default mode for each query.
The mode can be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.

The "off" mode disables DNS-over-HTTPS.

The "automatic" mode sends DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available, and falls back to sending insecure queries on error.

The "secure" mode only sends DNS-over-HTTPS queries and will fail to resolve on error.

If you don't configure this policy for managed devices, DNS-over-HTTPS queries aren't sent. Instead, the browser
may send DNS requests to a resolver associated with the user's system resolver.
This could lead to a less secure or private DNS resolution process, depending on the resolver in use.

Policy options mapping:

* off (off) = Disable DNS-over-HTTPS

* automatic (automatic) = Enable DNS-over-HTTPS with insecure fallback

* secure (secure) = Enable DNS-over-HTTPS without insecure fallback

Use the preceding information when configuring this policy.

Example value: off

Options

  • Control the mode of DNS-over-HTTPS
    • Disable DNS-over-HTTPS
    • Enable DNS-over-HTTPS with insecure fallback
    • Enable DNS-over-HTTPS without insecure fallback

Registry

ComputerHKEY_LOCAL_MACHINE
  • DnsOverHttpsModeREG_SZ
UserHKEY_CURRENT_USER
  • DnsOverHttpsModeREG_SZ

Other policies in the same category

View all policies in this category (438)