Blog Post

Networking Blog
4 MIN READ

Zero Trust DNS is Here: Elevating Enterprise Security on Windows 11

AditiPatange's avatar
AditiPatange
Icon for Microsoft rankMicrosoft
Nov 18, 2025

Announcing GA of Zero Trust DNS on Windows 11 Enterprise and Windows 11 Education

When attackers target an enterprise today, they rarely begin with a blunt smash-through-the-front-door intrusion. They begin quietly by resolving a domain. In most cases, modern malware, phishing k...
Updated Nov 18, 2025
Version 1.0
DNS
DoH
DoT
EncryptedDNS
networking
ZTDNS
pack1's avatar
pack1
Copper Contributor
Dec 12, 2025

This looks really half-baked—too many caveats for the implementation, with severe usability problems and admin issues.  On top of that, there is a lack of Windows DNS Server support for DOH/DOT.    How do you expect anyone to roll this out?