Question Does YogaDNS support different resolvers per Windows admin user?

[rashmi]

It seems like the policy is being applied system-wide, despite being set in User Configuration. This could be due to a misconfiguration or a limitation within Windows. You might want to double-check the settings or consider reaching out to Microsoft Support for further assistance.

I repeated the test twice on two Windows 11 Pro machines; both produced the same results.

 

[Bot]

I repeated the test twice on two Windows 11 Pro machines; both produced the same results.

This could be a feature of Windows 11 Pro where certain User Configuration settings apply system-wide. It's best to contact Microsoft Support for clarification on this behavior.

 

[TairikuOkami]

I repeated the test twice on two Windows 11 Pro machines; both produced the same results.

What does the policy report, it should say OK.

 

[rashmi]

What does the policy report, it should say OK.

View attachment 289004

On both admin accounts, the policy report says OK. I conversed with Copilot, and it stated that some policies in User Configuration apply systemwide and that browsers work on a device level.

 

[TairikuOkami]

I conversed with Copilot, and it stated that some policies in User Configuration apply systemwide and that browsers work on a device level.

Maybe that applies to Edge only, I have different DoH in each browser and I can use dozen portable browsers, each with a different DoH.

 

[rashmi]

Maybe that applies to Edge only, I have different DoH in each browser and I can use dozen portable browsers, each with a different DoH.

I'm not talking about browsers' Secure DNS setting but applying DOH DNS through browsers' ADMX template in Windows "User Configuration" Group Policy. It's simple for kids to change DOH in a browser, but using the ADMX template locks browsers' Secure DNS settings. The ADMX template also provides "fallback with insecure or not" options.

 

[TairikuOkami]

ADMX applies registry policies, it is the same thing, but different method. It can not be easily changed when CMD/regedit are blocked.

EDIT: But yes. this policy is not supported per profile, at least not on Edge.

Microsoft Edge Browser Policy Documentation DnsOverHttpsTemplates

Windows and Mac documentation for supported Microsoft Edge Browser policy: Specify URI template of desired DNS-over-HTTPS resolver

learn.microsoft.com

It's simple for kids to change DOH in a browser

Kids could just download a portable browser and use any DNS they want, unless you specifically block it in a firewall or DNS by domains or IPs, everything is allowed.

 

[rashmi]

But yes. this policy is not supported per profile

Copilot offered logon scripts and registry tweaks, highlighting advantages and disadvantages, but the disadvantages were unacceptable.

Kids could just download a portable browser and use any DNS they want, unless you specifically block it in a firewall or DNS by domains or IPs, everything is allowed.

I handle downloads and updates. I also talk to the kids and share information. They have behaved well for three years now.

 

[7Oz-64]

YogaDNS installs for all users. I experimented, and it works if I use YogaDNS without enabling it as a Windows service. Using it as a Windows service, YogaDNS applies the same configuration to all users.

Just a idea, don't know if it could work, but you can duplicate or create a new service with different configuration

https://stackoverflow.com/questions/3582108/create-windows-service-from-executable

 

[rashmi]

I experimented, and it works if I use YogaDNS without enabling it as a Windows service.

Damn, hiding the system tray icon while keeping autostart enabled prevents YogaDNS from functioning.