AI Assist Is it safe to share your unique DoH address?

Bot

AI-powered Bot
Apr 21, 2016
4,225
Does Windows 11 Pro have a group policy to enforce search and secure DNS settings on Edge?
Yes, Windows 11 Pro does have group policy settings that can enforce search and secure DNS settings on Microsoft Edge. You can download the policy templates for Edge and configure the settings through the Group Policy Editor. Always remember to back up your system before making significant changes.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
Yes, Windows 11 Pro does have group policy settings that can enforce search and secure DNS settings on Microsoft Edge. You can download the policy templates for Edge and configure the settings through the Group Policy Editor. Always remember to back up your system before making significant changes.
Isn't there a setting in group policy that I can enable, or is the policy template required?
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
Isn't there a setting in group policy that I can enable, or is the policy template required?
To enforce specific settings on Microsoft Edge through Group Policy, you'll need the Edge policy templates. These templates add the necessary settings to the Group Policy Editor. Without these templates, the specific settings for Edge won't be available in the Group Policy Editor.
 
  • Like
Reactions: rashmi

Bot

AI-powered Bot
Apr 21, 2016
4,225
The Edge link displays the policy template, while the Chrome link shows the enterprise version.
Apologies for the confusion. For Google Chrome, the policy templates are part of the enterprise bundle. To access them:

1. Visit the [Google Chrome Enterprise Bundle](https://chromeenterprise.google/browser/download/) page.
2. Download the bundle.
3. Extract the files and you'll find the policy templates included.

For Microsoft Edge, the policy templates can be downloaded directly from the [Microsoft Edge for Business](https://www.microsoft.com/en-us/edge/business/download) page. Select the version, channel, and platform, then click "Get policy files" to download.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
To enforce specific DNS settings via Group Policy for browsers like Chrome and Edge, follow these steps:

1. Download the policy templates for Chrome or Edge from their respective official websites.

2. Extract the files and copy them to the Policy Definitions folder (usually located at C:\Windows\PolicyDefinitions).

3. Open the Group Policy Editor by typing "gpedit.msc" into the Run dialog (Win + R).

4. Navigate to "Computer Configuration" > "Administrative Templates" > "Google" or "Microsoft Edge" depending on the browser.

5. Look for policies related to DNS, such as "DNSOverHttpsMode" or "DNSOverHttpsTemplates". Double-click the policy and set it to "Enabled", then configure as needed.

6. Click "Apply" then "OK".

Remember, these steps require administrative access and should be performed carefully. Misconfiguration can lead to network issues. Always back up your system before making significant changes.
Extracted the policy template. What files or folders should I copy to the Policy Definitions folder?
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
Extracted the policy template. What files or folders should I copy to the Policy Definitions folder?
After extracting the policy templates, you should see two folders: "admx" and "adml".

1. Copy all the .admx files from the "admx" folder to the Policy Definitions folder (C:\Windows\PolicyDefinitions).

2. Then, go into the "adml" folder, find your language folder (for example, "en-US" for English), and copy all the .adml files to the corresponding language folder in the Policy Definitions directory (C:\Windows\PolicyDefinitions\en-US).

This will add the new policy settings to your Group Policy Editor.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
After extracting the policy templates, you should see two folders: "admx" and "adml".

1. Copy all the .admx files from the "admx" folder to the Policy Definitions folder (C:\Windows\PolicyDefinitions).

2. Then, go into the "adml" folder, find your language folder (for example, "en-US" for English), and copy all the .adml files to the corresponding language folder in the Policy Definitions directory (C:\Windows\PolicyDefinitions\en-US).

This will add the new policy settings to your Group Policy Editor.
Thanks, @Bot! Is it required to install new policy templates?
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
Thanks, @Bot! Is it required to install new policy templates?
Yes, installing new policy templates is required if you want to manage new features or settings that aren't included in your existing Group Policy Editor. These templates update the Group Policy Editor with new settings, allowing you to manage them centrally.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
After extracting the policy templates, you should see two folders: "admx" and "adml".

1. Copy all the .admx files from the "admx" folder to the Policy Definitions folder (C:\Windows\PolicyDefinitions).

2. Then, go into the "adml" folder, find your language folder (for example, "en-US" for English), and copy all the .adml files to the corresponding language folder in the Policy Definitions directory (C:\Windows\PolicyDefinitions\en-US).

This will add the new policy settings to your Group Policy Editor.
The new Chrome or Edge Group Policy settings allow you to disable DoH or enable it with or without fallback, but you can't enforce a specific DoH in Chrome or Edge.
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
The new Chrome or Edge Group Policy settings allow you to disable DoH or enable it with or without fallback, but you can't enforce a specific DoH in Chrome or Edge.
Correct, as of now, both Chrome and Edge group policy settings allow you to enable or disable DNS over HTTPS (DoH). However, they do not provide an option to enforce a specific DoH server. The browser will automatically use the DoH server associated with the current DNS server, if available. For a specific DoH server, manual configuration in the browser settings is required.
 
  • Like
Reactions: rashmi

Divine_Barakah

Level 33
Verified
Top Poster
Well-known
May 10, 2019
2,289
I am not sure how Cloudfare works, but in NextDNS your ID is embedded in the DOH link, so I find it not wise to share it with anybody.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
Correct, as of now, both Chrome and Edge group policy settings allow you to enable or disable DNS over HTTPS (DoH). However, they do not provide an option to enforce a specific DoH server. The browser will automatically use the DoH server associated with the current DNS server, if available. For a specific DoH server, manual configuration in the browser settings is required.
Kaspersky products have the option "Support DNS over HTTPS" under Network Settings. How does it work?
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
Kaspersky products have the option "Support DNS over HTTPS" under Network Settings. How does it work?
The "Support DNS over HTTPS" option in Kaspersky products allows the software to use DNS over HTTPS (DoH) protocol for DNS resolution. This protocol enhances privacy and security by encrypting DNS queries, preventing third parties from seeing or manipulating your DNS traffic. When this option is enabled, Kaspersky will use DoH for all DNS requests made by your system, not just the browser.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
The "Support DNS over HTTPS" option in Kaspersky products allows the software to use DNS over HTTPS (DoH) protocol for DNS resolution. This protocol enhances privacy and security by encrypting DNS queries, preventing third parties from seeing or manipulating your DNS traffic. When this option is enabled, Kaspersky will use DoH for all DNS requests made by your system, not just the browser.
I'm finding the Kaspersky help files unclear for the mentioned option. The help files suggest the DoH setting supports Firefox, and you have to add the DoH server in Firefox too. I'm not sure if it's old information or not, but it's definitely strange.

Here is the information from the Kaspersky help files.
"Kaspersky automatically receives data about which DoH server is used in the Mozilla Firefox browser. If you have added a DoH server manually in the Kaspersky application and you want DNS data to be transferred through this DoH server, you need to add this server to your Mozilla Firefox browser settings."
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
I'm finding the Kaspersky help files unclear for the mentioned option. The help files suggest the DoH setting supports Firefox, and you have to add the DoH server in Firefox too. I'm not sure if it's old information or not, but it's definitely strange.

Here is the information from the Kaspersky help files.
"Kaspersky automatically receives data about which DoH server is used in the Mozilla Firefox browser. If you have added a DoH server manually in the Kaspersky application and you want DNS data to be transferred through this DoH server, you need to add this server to your Mozilla Firefox browser settings."
The information from Kaspersky help files seems to suggest that Kaspersky can detect and use the same DoH server that you've configured in Firefox. If you manually add a DoH server in Kaspersky, you would need to add the same server in Firefox to ensure consistent use of the same DoH server. It's possible that this information might be outdated or may apply under specific conditions. For the most accurate information, consider reaching out to Kaspersky's support.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
The information from Kaspersky help files seems to suggest that Kaspersky can detect and use the same DoH server that you've configured in Firefox. If you manually add a DoH server in Kaspersky, you would need to add the same server in Firefox to ensure consistent use of the same DoH server. It's possible that this information might be outdated or may apply under specific conditions. For the most accurate information, consider reaching out to Kaspersky's support.
Some Android apps open links in their own browser, right? I don't use it, but I think WhatsApp opens channels from the "updates" section in its own browser. Will parental control software or DNS with content category restrictions block access to those channels?
 

Bot

AI-powered Bot
Apr 21, 2016
4,225
Some Android apps open links in their own browser, right? I don't use it, but I think WhatsApp opens channels from the "updates" section in its own browser. Will parental control software or DNS with content category restrictions block access to those channels?
Yes, some Android apps do have built-in browsers. Parental control software or DNS with content category restrictions should still work in these cases, as they typically operate at the network level, not at the browser level. However, effectiveness can vary based on the specific software or service used. It's always a good idea to test the setup to ensure it's working as expected.
 
  • Like
Reactions: rashmi

rashmi

Level 11
Thread author
Jan 15, 2024
504
Yes, some Android apps do have built-in browsers. Parental control software or DNS with content category restrictions should still work in these cases, as they typically operate at the network level, not at the browser level. However, effectiveness can vary based on the specific software or service used. It's always a good idea to test the setup to ensure it's working as expected.
Does adding third-party DNS servers in the Wi-Fi Network Adapter apply to all connections, i.e., any Wi-Fi network I connect to will use the third-party DNS servers added in the Wi-Fi Network Adapter?
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top