Configure DNS over HTTPS (DoH) name resolution

Specifies if the DNS client will perform name resolution over DNS over HTTPS (DoH).

By default, the DNS client will do classic DNS name resolution (over UDP or TCP). This setting can enhance the DNS client to use DoH protocol to resolve domain names.

To use this policy setting, click Enabled, and then select one of the following options from the drop-down list:

Prohibit DoH: No DoH name resolution will be performed.

Allow DoH: Perform DoH queries if the configured DNS servers support it. If they don't support it, try classic name resolution.

Require DoH: Allow only DoH name resolution. If there are no DoH capable DNS servers configured, name resolution will fail.

If you disable this policy setting, or if you do not configure this policy setting, computers will use locally configured settings.

Configure DoH options:

0. Require DoH
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Microsoft\Windows NT\DNSClient
   Value Name	DoHPolicy
   Value Type	REG_DWORD
   Value	3

1. Allow DoH
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Microsoft\Windows NT\DNSClient
   Value Name	DoHPolicy
   Value Type	REG_DWORD
   Value	2

2. Prohibit DoH
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Microsoft\Windows NT\DNSClient
   Value Name	DoHPolicy
   Value Type	REG_DWORD
   Value	1