Secure DNS in Endpoint Manager

Hello,

This is my first post to this forum and its probably the wrong one, as there appears to be none for Edge public only preview.

I have enabled secure DNS in Edge Chromium (version Version 87.0.664.66)

This was disabled via MEM by default

All systems within the network are managed by MEM. 

All systems are protected via Defender Endpoint (I seriously love this solution)

The router is set to use Cloud flare to provide DNS resolution but not SDNS by default.

Investigations have revealed to me that Google DNS cant be trusted, neither can my ISP

(I've had 3 DNS poisoning attacks in the last 2 years).

Windows systems are running 20H2

The solution I use is full cloud, no hybrid, no internal servers, its all cloud - Microsoft.

So here is what I did.  It might help somebody it might not.

The guide is here.

https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-configure-edge?toc=https://docs.microsoft.com/DeployEdge/toc.json&bc=https://docs.microsoft.com/DeployEdge/breadcrumb/toc.json

The results are here.