Secure DNS in Endpoint Manager

[braedachau]

Hello,

This is my first post to this forum and its probably the wrong one, as there appears to be none for Edge public only preview.

I have enabled secure DNS in Edge Chromium (version Version 87.0.664.66)

This was disabled via MEM by default

All systems within the network are managed by MEM. 

All systems are protected via Defender Endpoint (I seriously love this solution)

The router is set to use Cloud flare to provide DNS resolution but not SDNS by default.

Investigations have revealed to me that Google DNS cant be trusted, neither can my ISP

(I've had 3 DNS poisoning attacks in the last 2 years).

Windows systems are running 20H2

The solution I use is full cloud, no hybrid, no internal servers, its all cloud - Microsoft.

So here is what I did.  It might help somebody it might not.

The guide is here.

https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-configure-edge?to...

The results are here.

[#2]

Hi,
thanks for the post,
by the way Windows 10 will soon provide secure DNS (DNS over HTTPS) on OS level to consumers. it's been available for months in insider versions of Windows
https://techcommunity.microsoft.com/t5/networking-blog/windows-insiders-can-now-test-dns-over-https/...

when I test it and set Edge DNS to use system DNS, Cloudflare secure DNS checking website shows green all across the board.