It is important that users are unable to manipulate the DNS settings received via DHCP from your DHCP server. By changing the DNS Server IP's, you run the risk of not only breaking internal network name resolution (such as accessing file servers or printers) but potentially being able to bypass Securly's DNS Filter if your Internal DNS Servers are pointing to our Forwarders. For this, ensure that users are unable to edit network settings. This can be achieved by enabling or disabling URIs of specific Settings app pages. To learn more, check out the latest guidelines from Microsoft here.