Blog Post

Networking Blog
5 MIN READ

Announcing Public Preview of Zero Trust DNS

AditiPatange's avatar
AditiPatange
Icon for Microsoft rankMicrosoft
Apr 24, 2025

Deployment instructions for testing Public Preview of Zero Trust DNS (ZTDNS) on Windows 11 Insider builds.

  In today's evolving cybersecurity landscape, traditional perimeter defenses are no longer sufficient . As organizations embrace the Zero Trust security model, ensuring that devices only communica...
Updated Apr 24, 2025
Version 3.0
DNS
DoH
DoT
EncryptedDNS
networking
ZTDNS
raghu_niranjan's avatar
raghu_niranjan
Copper Contributor
Jun 30, 2025

Hi AditiPatange​ ,


I have tested the ZTDNS feature on my system and observed that all DNS queries are currently being sent over UDP. It appears that the configured DNS-over-HTTPS (DoH) URL is not being utilized for DNS resolution.

Below are the current ZTDNS settings on my system:

Command: netsh ztdns show state

ZTDNS Settings
----------------------------------------------------------------------
Enabled                          : Yes  
Audit Mode                       : Yes  
Block Local IPs                  : Block  
Allow Hosts File                 : Block  
Allow ICS DHCP Server            : Block  
Enable Localhost Forwarder       : No  
Max Record Age (s)               : 86400  
Service Name Refresh Timeout (s) : 1800
Command: netsh ztdns show server

ZTDNS Trusted Server: 8.8.8.8
----------------------------------------------------------------------
Port         : 443  
Server Type  : DoH  
Template     : https://dns.google/dns-query


Could you please advise on the necessary configuration changes required to ensure that DNS queries are forwarded over DoH as intended?