FirewallDNS
    Windows Server and Azure

    How to Change DNS on Windows Server DHCP

    By [FILL IN], [FILL IN] · Last updated

    For networks without Active Directory DNS, hand out FirewallDNS directly through Windows DHCP option 006.

    Before you start

    You need a FirewallDNS account (see pricing). Sign in to your dashboard, register your public IP address and copy your DNS server addresses. Replace <FIREWALLDNS-PRIMARY> and <FIREWALLDNS-SECONDARY> below with them.

    Step by step

    1. Open DHCP management (dhcpmgmt.msc).
    2. Expand IPv4 > Scope > Scope Options (or Server Options for all scopes).
    3. Right-click > Configure Options and tick 006 DNS Servers.
    4. Remove the existing addresses and add <FIREWALLDNS-PRIMARY> and <FIREWALLDNS-SECONDARY>.
    5. Click OK. Clients pick up the change at lease renewal; run ipconfig /renew to test.

    PowerShell

    Set-DhcpServerv4OptionValue -ScopeId 192.168.1.0 -DnsServer <FIREWALLDNS-PRIMARY>,<FIREWALLDNS-SECONDARY>

    Good to know

    • If clients are domain-joined, use the Active Directory forwarder guide instead.

    Verify it works

    1. Renew DHCP on a client (Windows: ipconfig /renew, macOS: reconnect Wi-Fi).
    2. Run nslookup example.com and check which server answered.
    3. Open the live log in your dashboard. New lookups should appear within seconds.

    Learn more

    Not protected yet?

    FirewallDNS costs $2.90 per device per month.