Edit

Share via

AdditionalDnsQueryTypesEnabled

Allow DNS queries for more DNS record types

Supported versions

  • On Windows and macOS since 140 or later

Description

This policy controls whether Microsoft Edge can query more DNS record types when making insecure (non-Secure DNS) requests.

If this policy is unset or set to Enabled, more record types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).

If this policy is set to Disabled, Microsoft Edge will only query A and AAAA record types for insecure DNS requests.

This setting doesn't affect DNS queries made via Secure DNS, which may always use more record types.

Note: This is a temporary policy and is planned for removal in a future version of Microsoft Edge. After removal, Microsoft Edge will always be able to query more DNS types during insecure requests.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Boolean

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: AdditionalDnsQueryTypesEnabled
  • GP name: Allow DNS queries for more DNS record types
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Enabled

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: AdditionalDnsQueryTypesEnabled
  • Value type: REG_DWORD

Example registry value

0x00000001

Mac information and settings

  • Preference Key name: AdditionalDnsQueryTypesEnabled
  • Example value:
<true/>

See also