Secure DNS settings from end user
Looking for a way to set windows 7 Home users DNS client settings to force DNS addresses to a an IP in a way the end user can't modify even if they have admin rights. In XP I could set the dns client IP address in "Local Computer Policy" Under Administrative Templates/Network/DNS Client/DNS Servers. But this item exists but does not work in windows 7. Is there another way to do this. I manage a large number of home users computers. Most of these users have administrator rights and i do not have access to their network routers. I want to be able to enforce all these pc's to use OpenDNS's DNS IP's on all netwok interfaces no matter where they connect to the internet. (ie Kids computer, I could set the DNS on the home router but if they take their laptop to their friends house and just connect via wireless and get DHCP from that houses home router the will get different dns settings). Is there another way to do this... Maybe a registry key to force dns client IP addresses. (that would override anything manually entered into the network card config. Randal.
June 30th, 2010 1:10am

Could I perhaps achive this goal by some how using "Local Computer policy/computer configuration/windows settings/Name Resolution policy"???? Randal.
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2010 3:00am

I do not know how to set the DNS so they can change it, but I can tell you it would not matter if you set the DNS to opendns or not, once the kids / anyone takes the laptop of the IP address setup in opendns network.. the filtering stops, so it does not matter if you lock them out of the settings. You would have to create an opendns network for each laptop and use the dynamic IP software to update the IP with opendns for Opendns to work on a roaming device.
June 30th, 2010 5:13am

Up until recently.. yes you would be corrent but they have now release their FamilyShelid product which is like the old days where you can just point your DNS Client setting at their IP address...No Black/White listing but a good basic filter. So i want to be able to set the DNS on the kids laptops do they must uses these IP's for DNS no matter where they go or how they connect to the internet. An as the kids have a basic understanding of how to set up networking (and google for solutions to problems) I am looking for a way to force these DNS settings no matter what they do. ie registry settings or Local Computer Policy. Any help would be appreciated.
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2010 6:49am

No I think you are still confused, there is no way that setting FamilyShield can work when the laptop is NOT connecting via a router setup to use it. FamilyShield is really nothing other than opendns set to filter some content by default. From the website.... When you set up FamilyShield on your router, every device in your home that shares that Internet connection gets protected too. Your kids' Xbox, Wii, DS, iPad, and cell phone also get protected. ........
June 30th, 2010 6:44pm

Image from their Instructional set guide on how to set it up for windows 7.... I have test this and it works.......What i want to be able to do is set the DNS with the Local Computer policy or in the registry so the kids can't go and change it back again...(even if they have admin rights).
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2010 1:19am

The policy should work in Windows 7. Why did you say that it does not work? Additionally, if you define a DNS server for network A, it may not work in another network, for example, network B. Because the address of the DNS servers are different. When anyone access Internet, the Internet DNS they connect is not controlled by you. The DNS settings you configured on local computer is only for local area network. Therefore, in my opinion, it is no need to set any limitation to the local DNS server.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
July 1st, 2010 10:32am

O'My God... Why do I waste my time posting to a Microsoft networking forum... I would have thought that at least the moderators of the networking forum would have some small concept of how networking and DNS works...... But Obviously not.....
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2010 2:10am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics