This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 69%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJO%3C/text%3E%3C/svg%3E)
Hi,
I'm unable to change the Secure DNS setting within the MS Edge browser. I've attached a screenshot of the Microsoft Edge section I want to change, and it is currently greyed out. Where can I change this setting for my organization, if in fact that's what I have to do? Here's the following information.
Edition Windows 11 Pro
Version 23H2
Installed on 5/12/2022
OS build 22631.2048
Experience - Windows Feature Experience Pack 1000.22658.1000.0
with Microsoft Edge Version 114.0.1823.82 (Official build) (64-bit)
To troubleshoot locally, I tried changing the following registry settings without success.
To turn off:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"BuiltInDnsClientEnabled"=dword:00000000
To turn on:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"BuiltInDnsClientEnabled"=dword:00000001
Thank you in advance.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 61%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Has anyone given a coherent solution to this problem, which, as I understand it is that a lot of users are unable to enable encrypted DNS in Edge because we get a message that our browsers are managed, but they aren't. I'm logging in with my personal email address, I belong to no organizations, I'm just a retail customer using a Microsoft ID to log into Windows 11, as is recommended by Microsoft. He do I turn the darn thing off? It's NOT a managed browser, meaning I have given no one but myself power over my windows computer. I'd like to enable encrypted DNS at the browser level. I cannot because it says my browser is managed. When I get to edge://policy, there is one item - StartupBoostEnabled, and it is set to FALSE. Where is this group policy coming from? How do I turn it off?
Check the Group Policy setting "Control the mode of DNS-over-HTTPS" or refer to the following key in the registry:
HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftEdge
and
HKEY_CURRENT_USERSoftwarePoliciesMicrosoftEdge
Check the following values:
DnsOverHttpsMode
If the data is turned off, "Use secure DNS" entry is grayed out.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi @Jose Ortiz,
I've attached a screenshot of the Microsoft Edge section I want to change, and it is currently greyed out. Where can I change this setting for my organization, if in fact that's what I have to do?
It looks like your environment is under organizational management. You'll see this message displayed on the lock icon:
In this case, this setting cannot be changed manually by the user. You need to modify it through the corresponding group policy (or registry):
Here is my test:
Best regards,
Xudong Peng
If the answer is the right solution, please click "Accept Answer" and kindly upvote. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
I appreciate the answer, but unfortunately, I already knew this. I need to find out where I can make the change from the organization side. My organization (a personal LLC) is on Microsoft using the companyname.onmicrosoft.com suffix and I can't figure out how to modify this policy from the organizational aspect being forced down onto my browser. I haven't changed anything from the organization and everything is default after I created it on Microsoft.
Hi @Jose Ortiz,
Once Microsoft Edge has applied any Group Policy, this option cannot be changed manually by the user, which is by design. You can navigate to edge://policy to check it.
Hi @Anonymous ,
Understood, I get that, but where is this policy coming from so that I may change it? I'm a sole proprietor LLC using Microsoft for my LLC and I would like to understand what gets pushed down to my PC and be able to modify as needed along with any other security policy. It's coming from somewhere, right? I just want to choose another secure DNS server.
Thanks so far for the information, it's been helpful in understanding how all of this works.
Hi @Jose Ortiz,
Okay, if that's the case, you'll need to consult your IT administrator, if possible. Because it may involve company (organization) policy, etc.
Hi @Jose Ortiz , @Anonymous ,
I have the exact problem. I want to let users be able to change that setting whenever they want without me getting involved in changing it from Administrative Templates.
Is there really no solution for this?
Thank you!
Alex
