---
title: Granular Protection and Active Directory integration
slug: legacy/granular-protection-and-active-directory-integration
description: Explore the Pro+ version of FlashStart DNS filtering, which empowers advanced management of filtering policies tailored to Active Directory groups and users. 
docTags: 
createdAt: 2024-01-12T15:54:03.426Z
---

## Granular protection and integration with Active Directory 

The *Pro+ version of DNS filtering* allows you to manage different filtering policies related to *Active Directory groups and users*.

To do this you need to configure:

-
  **Windows connector**
- **DNS Proxy**

### Windows connector Configuration 

It must be installed in the *Microsoft Active Directory Server with the Administrator account*, and is used to synchronize users and groups with our Datacenters. 
Go to the dedicated guide [Windows connector setup](docId\:Nl0YvrsUsx-1nf_DV23e_) 

### DNS Proxy Configuration 

At this point you need to download and configure the *DNS proxy*.
Go to the dedicated guide [DNS proxy installation and configuration](docId\:iKT2bkWdeaoEl5hzuSlCf)**.**

## DNS Network Configuration 

The *DNS proxy IP address* must be the unique DNS server for PCs and WiFi guest devices.
It will also provide the internal Windows domain controller with *Active Directory DNS zones*.
You can configure *DNS settings by a DHCP server or manually configure DNS clients*.
To better understand how it works look at picture for **[example](https://cloud.flashstart.com/customerarea/ca-include/img/knbase/NetworkDNSConfigurationX.png)**. 

## Prevent users from ignoring DNS filtering 

To improve network security by preventing users from changing DNS settings, follow this guide: [Preventing users from ignoring DNS filter](docId\:VHnZuHEuWf4SVS_K21WIb) 



**Other ways to ask**:

- How to manage granular protection integration with Active directory.
- Managing granular protection and integration with Active directory. How to.