---
title: The denial of DNS changes to users through Active Directory group policies
slug: legacy/the-denial-of-dns-changes-to-users-through-active-directory-group-policies
description: Discover effective strategies to prevent users from modifying DNS settings using Active Directory Group Policies in this comprehensive document.
docTags: 
createdAt: 2024-01-18T08:55:06.211Z
---

Users can be prevented from changing DNS using *Active Directory Group Policies*.
For more information on Group Policies (GPOs), see Microsoft's online guides.

Another improvement that can be implemented is to create some rules in the router/firewall, to automatically redirect DNS requests from PCs to the private IP of the DNS Proxy.

In this way, internal devices configured to use a DNS other than the DNS Proxy IP will be filtered using the default filter criteria.
**IMPORTANT**: This rule should be applied to all IPs except the Proxy DNS.

**Related articles**:

[Pro+ Filter setup - Introduction](docId\:K_bf7DPc8ndUCo2j1VCOK) 

**Other ways to ask**:

- How to deny DNS changes to users.
- Denying DNS changes to users. How to do it.