The denial of DNS changes to users through Active Directory group policies

users can be prevented from changing dns using active directory group policies for more information on group policies (gpos), see microsoft's online guides another improvement that can be implemented is to create some rules in the router/firewall, to automatically redirect dns requests from pcs to the private ip of the dns proxy in this way, internal devices configured to use a dns other than the dns proxy ip will be filtered using the default filter criteria important this rule should be applied to all ips except the proxy dns related articles configuring pro+ filter introduction other ways to ask how to deny dns changes to users denying dns changes to users how to do it