Blocking Malware & Adult Content using 1.1.1.1 for Families

Cloudflare provides ‘1.1.1.1 for Families’ as an extra layer of protection against malware and adult content.  This is an alternative to the 1.1.1.1 DNS resolver which also filters content.

This service can be used on Android, Linux, Windows, iOS, macOS and Routers.

The below guide is taken from Cloudflare Developers Docs.

Windows limited users will be unable to change these settings when devices are configured by an administrator account.

Block malware and adult content
​IPv4
Click the Start menu > Settings.

Select Network and Internet > Change Adapter Settings.

Right-click on the WiFi network you are connected to and click Properties.

Select Internet Protocol Version 4

Click Properties.

Click Use The Following DNS Server Addresses and add:

1.1.1.3
1.0.0.3

Click OK.

​IPv6
Click the Start menu > Settings.

Click Network and Internet > Change Adapter Settings.

Right-click on the Wi-Fi network you are connected to and click Properties.

Select Internet Protocol Version 6.

Click Properties > Use The Following DNS Server Addresses and add:

2606:4700:4700::1113
2606:4700:4700::1003

Click OK.

Using Command Prompt to apply DNS setting

For Windows Vista and higher (requires Admin rights).

To join multiple commands in Command Prompt use two ‘&’ signs – &&

netsh int ipv4 set dns name="Wi-Fi" static 1.1.1.3 primary validate=no
netsh int ipv4 add dns name="Wi-Fi" 1.0.0.3 index=2 validate=no

netsh int ipv6 set dns name="Wi-Fi" static 2606:4700:4700::1113 primary validate=no
netsh int ipv6 add dns name="Wi-Fi" 2606:4700:4700::1003 index=2 validate=no

Using PowerShell to apply DNS setting – both IPv4 & IPv6

Set-DNSClientServerAddress "Wi-Fi" –ServerAddresses ("1.1.1.3","1.0.0.3","2606:4700:4700::1113","2606:4700:4700::1003")

Disable Airplane Mode / WiFi Keyboard Button on Laptops using Group Policy

To disable Airplane Mode first create a new group policy or edit an existing group policy.

Start editing the policy and navigate to: Computer Configuration > Policies > Windows Settings > Security Settings > System Services

Open the ‘Radio Management Service’ properties, tick ‘Define this policy’ and select ‘Disabled’ from the select service startup mode.

Disable Radio Management Service

Windows 10: Disable Mobile Hotspot – Internet Connection Sharing, with Group Policy

Internet Connection Sharing (ICS) is a Windows service that enables one Internet-connected computer to share its Internet connection with other computers on a local area network.

Users can easliy turn on this feature from the immersive control panel in Windows 10.

Enabling mobile hotspot

To disable Internet Connection Sharing create a new group policy or edit an existing group policy

Navigate to:

  • Computer Configuration
  • Policies
  • Administrative Templates
  • Network
  • Network Connections
  • Double-click “Prohibit use of Internet Connection Sharing on your DNS domain network” and select Enable
Disabling ICS
Disabling access to Mobile hotspot