It is important that users are unable to manipulate the DNS settings received via DHCP from your DHCP server. By changing DNS Server IP's, you run the risk of not only breaking internal network name resolution (such as accessing file servers or printers) but potentially being able to bypass Securly's DNS Filter if your Internal DNS Servers are pointing to our Forwarders. To do this, ensure that users are unable to edit their network settings. This can be achieved by enabling or disabling URIs on specific Settings app pages. To learn more, check out the latest guidelines from Microsoft here.