Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

Unable to disable DNS OVER HTTPS

  • 3 wótegrona
  • 1 ma toś ten problem
  • 12 naglědow
  • Slědne wótegrono wót Mike Kaply

deepak.kashyap052
deepak.kashyap052
more options

Hi team ,

We are en enterprise with more than 50k devices , we want to disable "dns over https " for firefox .

I have tested , by applying a locala GPO which creates following registry , Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled =0

referred https://github.com/mozilla/policy-templates/blob/master/README.md#DNSOverHTTPS

after apply"ting this local GPO , registry is created and on browser as welll , in about:policies , it shows this policy but when checking on s=browser settings "ENABLE DNS OVER HTTPS " is still enabled .

Please help , have tried a lot , it does not work and disabling this DOH is very important for us Many thanks

Hi team , We are en enterprise with more than 50k devices , we want to disable "dns over https " for firefox . I have tested , by applying a locala GPO which creates following registry , Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled =0 referred https://github.com/mozilla/policy-templates/blob/master/README.md#DNSOverHTTPS after apply"ting this local GPO , registry is created and on browser as welll , in about:policies , it shows this policy but when checking on s=browser settings "ENABLE DNS OVER HTTPS " is still enabled . Please help , have tried a lot , it does not work and disabling this DOH is very important for us Many thanks

Wšykne wótegrona (3)

Wesley Branton
Wesley Branton
more options

The Enabled setting alone essentially acts like a default value. If the user already has DNS Over HTTPS enabled, the GPO isn't going to override that. It will only do so if you also have the Locked value set to enabled.

In that case, the DNS Over HTTPS will be disabled and the user will not be able to change that setting, which sounds like what you want to do anyway.

Hope this helps.

deepak.kashyap052
deepak.kashyap052 Pšašaŕ
more options

Hi Wesley ,

Thanks for your response.

Have just tried locked policy as well , seems policy is again making registry changes and visible in about:policies and now good thing is when i foto settings in browser , there is an info button at the top which says " Your browser is being managed by your organization." but when checking for DNSOverHttps , it is still accessible and not in the locked state ?

Can u please suggest , where its gong wrong?

Note : I did this test on a fresh machine , installed Morzilla for the first time on this machine and did'nt enabled DNSOVERHTTPS , jyust applied local GPO to lock it .

Mike Kaply
Mike Kaply
  • Moderator
more options

I just ran a quick check and it's working for me. I've attached a screenshot with my settings and what I'm seeing.

When you go to about:config, what is the value for network.trr.mode and is it locked (disabled)?