How to enable DNS over HTTPS (DoH) in group policy on Windows 11?

Question

I am trying to enable DNS over HTTPS on my personal Windows 11 (Build 22621.1105) machine (Lenovo ThinkPad). I am the only user account on this machine (MS Account, Admin).

In the settings for the DNS (e.g. link) I can specify the preferred/alternate DNS (I am using Cloudflare's 1.1.1.1/1.0.0.1) -- but the DNS over HTTPS combobox is disabled (and showing "Off"). At the top of these settings it shows a text like "*Some of these settings are disabled or managed by your organization" (translated from German) (screenshot).

So i checked the Group Policy and indeed under "Computer Configuration/Administrative Templates/Network/DNS Client" the "Configure DNS over HTTPS (DoH) name resolution" policy is enabled and configured as "Prohibit DoH". When I change this configuartion or disable the policy, then after reopening Group Policy it shows "Prohibit DoH" again. In contrast, I can (permanently) change other policies, so for whatever reason I am not able to change this particular policy.

So my question: How to change this policy and/or what's the reason I can't change it?

I am thankful for any help!

Answer 1

Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query.

Open Settings > Network & internet > Wi-Fi and manually set the "DNS server assignment" setting if you want to enable DoH on Windows 11.

Open Settings > Network & internet > Wi-Fi and check the "IPv4 DNS servers" address should have an Encrypted label to verify DoH setting.

If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.