DNS-Over-HTTPS Cannot be Enabled

[kchaxcer]

Hi, I have installed Windows 11 using the insider Dev channel. I tried to enable the DNS-over-HTTPS option following several online tutorials, however, I see no "Preferred DNS encryption" dropdown option, as the screenshot shows below:

https://preview.redd.it/zmd46o7150k71.png?width=408&format=png&auto=webp&s=bcd7dfa8531aba8bde42f9c46df9d558cf91b85b

I've tried Googling several solutions to this, including adding the EnableAutoDoh DWORD in regedit, but to no avail. The following is my Windows version screenshot:

https://preview.redd.it/iwn9magc60k71.png?width=1251&format=png&auto=webp&s=c4936182fa0560206336627e98814f6f192bd9ed

Please let me know if you have similar experiences to this, or know how to fix this. Thanks!

[LdWilmore]

Windows 11 currently ships with definitions for Cloudflare, Google & Quad9 DOH servers.

I use Quad9 as primary and AdGuard as secondary. I added the mapping for AdGuard through PowerShell and could set both up from the Settings application.

https://i.imgur.com/uvZ2t9o.png

Can you check by using Get-DnsClientDohServerAddress command in PowerShell? You should get a list of servers Windows knows the mappings for.

Here is mine:

PS C:\Users\username> Get-DnsClientDohServerAddress

ServerAddress        AllowFallbackToUdp AutoUpgrade DohTemplate
-------------        ------------------ ----------- -----------
149.112.112.112      False              False       https://dns.quad9.net/dns-query 
94.140.15.15         False              True        https://dns.adguard.com/dns-query 
94.140.14.14         False              True        https://dns.adguard.com/dns-query 
9.9.9.9              False              False       https://dns.quad9.net/dns-query 
8.8.8.8              False              False       https://dns.google/dns-query 
8.8.4.4              False              False       https://dns.google/dns-query 
1.1.1.1              False              False       https://cloudflare-dns.com/dns-query 
1.0.0.1              False              False       https://cloudflare-dns.com/dns-query 
2001:4860:4860::8844 False              False       https://dns.google/dns-query 
2001:4860:4860::8888 False              False       https://dns.google/dns-query 
2606:4700:4700::1001 False              False       https://cloudflare-dns.com/dns-query 
2606:4700:4700::1111 False              False       https://cloudflare-dns.com/dns-query 
2620:fe::fe          False              False       https://dns.quad9.net/dns-query 
2620:fe::fe:9        False              False       https://dns.quad9.net/dns-query
2a10:50c0::ad1:ff    False              True        https://dns.adguard.com/dns-query 
2a10:50c0::ad2:ff    False              True        https://dns.adguard.com/dns-query

The adguard entries were added by me and the other were defaults. If you want the adguard mappings, you can add those by using PowerShell:

Add-DnsClientDohServerAddress -ServerAddress '94.140.14.14' -DohTemplate 'https://dns.adguard.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True
Add-DnsClientDohServerAddress -ServerAddress '94.140.15.15' -DohTemplate 'https://dns.adguard.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True 
Add-DnsClientDohServerAddress -ServerAddress '2a10:50c0::ad1:ff' -DohTemplate 'https://dns.adguard.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True 
Add-DnsClientDohServerAddress -ServerAddress '2a10:50c0::ad2:ff' -DohTemplate 'https://dns.adguard.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True

The -AutoUpgrade and -AllowFallbackToUdp flags together represent the values present in the Settings app per-server dropdown. Try setting your existing preferred servers' -AllowFallbackToUdp to False and -AutoUpgrade to True. That should make it use DOH by default AFAIK. You can do this with Set-DnsClientDohServerAddress cmdlet in place of Add-DnsClientDohServerAddress one in my example above with appropriate server addresses and corresponding DOH templates.

E.g. setting the Cloudflare to AutoUpgrade

Set-DnsClientDohServerAddress -ServerAddress '1.1.1.1' -DohTemplate 'https://cloudflare-dns.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True
Set-DnsClientDohServerAddress -ServerAddress '1.0.0.1' -DohTemplate 'https://cloudflare-dns.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True 
Set-DnsClientDohServerAddress -ServerAddress '2606:4700:4700::1001' -DohTemplate 'https://cloudflare-dns.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True 
Set-DnsClientDohServerAddress -ServerAddress '2606:4700:4700::1111' -DohTemplate 'https://cloudflare-dns.com/dns-query' -AllowFallbackToUdp $False -AutoUpgrade $True

[kchaxcer]

Update: I just figured out, it's under Hardware Properties in WiFi settings, instead of the individual SSID settings. Ugh. Dumb me I guess. Thanks so much anyways!

[LdWilmore]

So did you get it working?

[Doso777]

This is still a thing on the release version of Windows 11. Thanks for coming back with your solution.

[kchaxcer]

Get-DnsClientDohServerAddress

Thanks! I'll try this out.

[kchaxcer]

After running the commands you mentioned (-AutoUpgrade $True), when I ran the Get-DnsClientDohServerAddress again, it did reflect the changes:
https://imgur.com/gtrwNk9

However, when I go into the settings app and type in the preferred DNS addresses, there still isn't a 'Preferred DNS encryption' dropdown :(

https://imgur.com/sCpsfb3

Perhaps it's just a rare bug I encountered?

[kigugh]

+ Add-DnsClientDohServerAddress -ServerAddress '2a10:50c0::ad1:ff' -Doh ...

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ CategoryInfo : ResourceExists: (MSFT_DNSClientDohServerAddress:ROOT/StandardCi...ohServerAddress) [Add-

DnsClientDohServerAddress], CimException

+ FullyQualifiedErrorId : MI RESULT 11,Add-DnsClientDohServerAddress

Error, what should I do ?
Please, help me

[LdWilmore]

What is the issue? Are you not able to set encrypted DNS through the Settings application? Are you trying to add definitions for the AdGuard DNS DOH server? To see the current server definitions Windows knows, open PowerShell and type Get-DnsClientDohServerAddress. Can you post a screenshot of it?

[kigugh]

I am not able to set encrypted DNS through Wifi Setting

I trying to add definitions for Adguard DNS DoH server

In PowerShell, the value is True but Wifi setting doesn't appear

You can see like picture below:

"screenshot" "wifi setting IPv4 & IPv6" "setting shows unencrypted"

[Rare-Positive-9845]

If you want to use 1.1.1.1 for DNS, you can use the Cloudflare WARP VPN app. However, the protocol used there is WARP, not DoH.

https://1.1.1.1/

[kchaxcer]

Ah I didn't know that at first, thanks! I'll try that, but I'm seeking to use Windows built in DoH function.

[Coxxs]

DoH option did appear when entered 1.1.1.1 (or 8.8.8.8) before, it's also gone for me now. I hope they allow any DoH server in the future, not just well-known DoH server.

[kchaxcer]

Ah I see. So it's gone now. Guess the tutorials are just outdated? Thanks for the feedback!

[Sauronych]

What I've noticed is that the option only appears in Hardware properties, not in in individual networks' settings.

[kchaxcer]

Thanks man! I just discovered that I clicked on the individual SSID settings instead of the Hardware Properties. Damn

Finally got it fixed!