Windows 11 netsh dnsclient command

Microsoft Windows [Version 10.0.22621.2428]
(c) Microsoft Corporation.

C:\Windows>netsh dnsclient ?

The following commands are available:

Commands in this context:
?              - Displays a list of commands.
add            - Adds a configuration entry to a table.
delete         - Deletes a configuration entry from a table.
dump           - Displays a configuration script.
help           - Displays a list of commands.
set            - Sets configuration information.
show           - Displays information.

To view help for a command, type the command, followed by a space, and then
 type ?.

C:\Windows>netsh dnsclient add ?

The following commands are available:

Commands in this context:
add dnsservers - Adds a static DNS server address.
add encryption - Adds an encrypted DNS server template.
add global     - Adds a global DNS configuration.
add interface  - Adds interface specific DNS settings.

C:\Windows>netsh dnsclient add dnsservers ?

Usage: add dnsservers [name=]<string> [address=]<IP address> 
             [[index=]<integer>] [[validate=]yes|no]   
 
Parameters: 
 
      Tag            Value
      name         - The name or index of the interface where DNS 
                     servers are added.                     
      address      - The IP address for the DNS server you are adding.
      index        - Specifies the index (preference) for the specified 
                     DNS server address.
      validate     - Specifies whether validation of the DNS server setting 
                     will be performed. The value is yes by default. 
 
Remarks: Adds a new DNS server IP address to the statically-configured list.
         By default, the DNS server is added to the end of the list.  If an
         index is specified, the DNS server will be placed in that position
         in the list, with other servers being moved down to make room. 
         If DNS servers were previously obtained through DHCP, the new 
         address will replace the old list. If Validate switch is yes, 
          then the newly added DNS server is validated. 
 

C:\Windows>netsh dnsclient add encryption ?

Usage: add encryption [server=]<IP address> [dohtemplate=]<string> [[autoupgrade=]yes|no] [[udpfallback=]yes|no] 
 
Parameters: 
 
      Tag            Value 
      server       - The IP address for the encrypted DNS server to be 
                     added. 
      dohtemplate  - The DoH template to use for the server. 
      autoupgrade  - Whether queries to this server should be automatically 
                     upgraded to DoH. 
      udpfallback  - Whether UDP/TCP should be attempted for this server if 
                     DoH queries fail. 
 
Remarks: Adds a new encrypted DNS server template to the 
         statically-configured list of secure resolvers. 
 

C:\Windows>netsh dnsclient add global ?

Usage: add global [[doh=]yes|no|auto] [[ddr=]yes|no]
 
Parameters: 
 
      Tag            Value 
      doh          - The global DNS-over-HTTPS setting. The available 
                     options are: 
                     no:    forbids the use of DoH by the DNS client 
                     yes:   allows DoH use based on interface, server, 
                            or other configurations 
                     auto:  forces all well-known DoH servers to use only DoH 
      ddr          - The global DDR setting. The available 
                     options are: 
                     no:    disables the use of DDR by the DNS client 
                     yes:   enables DDR use based on interface, server, 
                            or other configurations 
 
Remarks: Adds a global DNS configuration option. 
 

C:\Windows>netsh dnsclient add interface ?

Usage: add interface [name=]<string> [[ddr=]yes|no] [[ddrfallback=]yes|no] 
 
Parameters: 
 
      Tag            Value
      name         - The name or index of the interface to be configured. 
      ddr          - The interface specific DDR setting. 
                     The available options are: 
                     yes:   perform DDR on all unencrypted servers configured 
                            on the specified adapter 
                     no:    do not perform DDR by default on unencrypted servers 
                            configured on the specified adapter 
      ddrfallback  - If per adapter DDR is enabled, specifies if the servers should 
                     fallback to unencrypted name resolution if the secure resolution 
                     using the DDR retrieved settings failed. 
                     Fallback is disabled by default. 
                     The available options are: 
                     yes:   enables fallback to unencrypted name resolution 
                     no:    disables fallback to unencrypted name resolution 
 
Remarks: Adds interface specific DNS settings. 

 

C:\Windows>netsh dnsclient delete ?

The following commands are available:

Commands in this context:
delete dnsservers - Deletes the DNS server from the specified interface.
delete encryption - Removes an encrypted DNS server template.
delete global  - Restores global DNS settings to their default values.
delete interface - Restores DNS interface specific settings to their default values.

C:\Windows>netsh dnsclient delete dnsservers ?

Usage: delete dnsservers [name=]<string> [[address=]<IP address>|all] [[validate=]yes|no]
 
Parameters: 
 
      Tag            Value
      name         - The name or index of the interface where DNS 
                     servers are deleted. 
      address      - One of the following values:
                     <IP address>: A specific IP address of a DNS server
                                   you are deleting.
                     all: Deletes all configured IP addresses for DNS. servers.
      validate     - Specifies whether validation of the DNS server setting 
                     will be performed. The value is yes by default. 
 
Remarks: Deletes statically configured DNS server IP addresses for a
         specific interface. If Validate switch is yes, then the remaining 
         DNS servers are validated. 
 
Examples: 
 
       delete dnsservers "Wired Ethernet Connection" all

C:\Windows>netsh dnsclient delete encryption ?

Usage: delete encryption [server=]<IP address> 
 
Parameters: 
 
      Tag            Value 
      server       - The IP address for the encrypted DNS server to be 
                     removed. 
 
Remarks: Removes an encrypted DNS server template from the 
         statically-configured list of secure resolvers. 
 

C:\Windows>netsh dnsclient delete global ?

Usage: delete global [global=](doh|ddr|all) 
 
Parameters: 
 
      Tag            Value 
      global       - The global DNS setting to be restored to its default 
                     value. The available options are: 
                     all:   restores all settings to their default values 
                     doh:   restores the default DoH global setting 
                     ddr:   restores the default DDR global setting 
 
Remarks: Restores DNS settings to their default values. 
 

C:\Windows>netsh dnsclient delete interface ?

Usage: delete interface [name=]<string> [setting=](ddr|all) 
 
Parameters: 
 
      Tag            Value 
      name         - The name or index of the interface to be configured. 
      setting      - The interface DNS setting to be restored to its default 
                     value. The available options are: 
                     all:   restores all settings to their default values 
                     ddr:   restores the default DDR global setting 
 
Remarks: Restores interface DNS settings to their default values. 
 

C:\Windows>netsh dnsclient dump ?

Usage: dump

Remarks: 
    Creates a script that contains the current configuration.  If saved to a
    file, this script can be used to restore altered configuration settings.

C:\Windows>netsh dnsclient help ?

Usage: help

Remarks: 
       Displays a list of commands.

C:\Windows>netsh dnsclient set ?

The following commands are available:

Commands in this context:
set dnsservers - Sets DNS server mode and addresses.
set encryption - Sets an encrypted DNS server template.
set global     - Sets a global DNS configuration.
set interface  - Sets interface specific DNS settings.

C:\Windows>netsh dnsclient set dnsservers ?

Usage: set dnsservers [name=]<string> [source=]dhcp|static
             [[address=]<IP address>|none]
             [[register=]none|primary|both]
             [[validate=]yes|no]
 
Parameters: 
 
      Tag            Value
      name         - The name or index of the interface.
      source       - One of the following values:
                     dhcp: Sets DHCP as the source for configuring DNS
                           servers for the specific interface.
                     static: Sets the source for configuring DNS servers
                             to local static configuration.
      address      - One of the following values:
                     <IP address>: An IP address for a DNS server.
                     none: Clears the list of DNS servers.
      register     - One of the following values:
                     none: Disables Dynamic DNS registration.
                     primary: Register under the primary DNS suffix only.
                     both: Register under both the primary DNS suffix, as
                           well as under the connection-specific suffix.
      validate     - Specifies whether validation of the DNS server setting 
                     will be performed. The value is yes by default.
 
Remarks: Sets DNS server configuration to either DHCP or static mode. Only 
         when source is 'static', is the 'addr' option also available for 
         configuring a static list of DNS server IP addresses for the
         specified interface. If Validate switch is yes, then
         the newly set DNS server is validated. 
 
Examples: 
 
       set dnsservers name="Wired Ethernet Connection" source=dhcp

C:\Windows>netsh dnsclient set encryption ?

Usage: set encryption [server=]<IP address> [dohtemplate=]<string> [[autoupgrade=]yes|no] [[udpfallback=]yes|no] 
 
Parameters: 
 
      Tag            Value 
      server       - The IP address for the encrypted DNS server to be 
                     modified. 
      dohtemplate  - The DoH template to use for the server. 
      autoupgrade  - Whether queries to this server should be automatically 
                     upgraded to DoH. 
      udpfallback  - Whether UDP/TCP should be attempted for this server if 
                     DoH queries fail. 
 
Remarks: Sets an encrypted DNS server template in the 
         statically-configured list of secure resolvers. 
 

C:\Windows>netsh dnsclient set global ?

Usage: set global [[doh=]yes|no|auto] [[ddr=]yes|no]
 
Parameters: 
 
      Tag            Value 
      doh          - The global DNS-over-HTTPS setting. The available 
                     options are: 
                     no:    forbids the use of DoH by the DNS client 
                     yes:   allows DoH use based on interface, server, 
                            or other configurations 
                     auto:  forces all well-known DoH servers to use only DoH 
      ddr          - The global DDR setting. The available 
                     options are: 
                     no:    disables the use of DDR by the DNS client 
                     yes:   enables DDR use based on interface, server, 
                            or other configurations 
 
Remarks: Sets a global DNS configuration option. 
 

C:\Windows>netsh dnsclient set interface ?

Usage: set interface [name=]<string> [[ddr=]yes|no] [[ddrfallback=]yes|no] 
 
Parameters: 
 
      Tag            Value
      name         - The name or index of the interface to be configured. 
      ddr          - The interface specific DDR setting. 
                     The available options are: 
                     yes:   perform DDR on all unencrypted servers configured 
                            on the specified adapter 
                     no:    do not perform DDR by default on unencrypted servers 
                            configured on the specified adapter 
      ddrfallback  - If per adapter DDR is enabled, specifies if the servers should 
                     fallback to unencrypted name resolution if the secure resolution 
                     using the DDR retrieved settings failed. 
                     Fallback is disabled by default. 
                     The available options are: 
                     yes:   enables fallback to unencrypted name resolution 
                     no:    disables fallback to unencrypted name resolution 
 
Remarks: Sets interface specific DNS settings. 
 

C:\Windows>netsh dnsclient show ?

The following commands are available:

Commands in this context:
show encryption - Shows an encrypted DNS server template.
show global    - Shows globally configured DNS settings.
show state     - Shows the dns state.

C:\Windows>netsh dnsclient show encryption ?

Usage: show encryption [[server=]<IP address>] 
 
Parameters: 
 
      Tag            Value 
      server       - The IP address for the encrypted DNS server to be 
                     displayed. 
 
Remarks: Shows an encrypted DNS server template from the 
         statically-configured list of secure resolvers. 
         If no server is specified, all templates in the list are displayed. 
 

C:\Windows>netsh dnsclient show global ?

Usage: show global
 
Parameters: none
 
Remarks: Displays all configured DNS global settings. 
 

C:\Windows>netsh dnsclient show state ?
Shows the dns state.