---
title: NetworkDNSSettings
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 27.0+, iPadOS 27.0+, Mac Catalyst 27.0+, macOS 27.0+, visionOS 27.0+]
path: devicemanagement/networkdnssettings
---

# NetworkDNSSettings

The declaration to configure encrypted DNS settings.

## Declaration

```data
object NetworkDNSSettings
```

## Properties

DNSSettings: A dictionary that defines a configuration for an encrypted DNS server. OnDemandRules: An array of rules that define the DNS settings. If not set, the system always applies the DNS settings. These rules are identical to the OnDemandRules array in VPN payloads. ProhibitDisablement: If true, the system prohibits users from disabling DNS settings. Allowed enrollments: supervised VisibleName: The name of the DNS settings that the system displays on the device.

## Discussion

Discussion Specify com.apple.configuration.network.dns-settings as the declaration type. The following rules determine which networks the settings apply to: For supervised enrollments, the settings apply to all networks. For device enrollments, the settings are limited to only managed networks. For local installs, the settings apply to all networks. Configuration availability  |   |   |   |   |   |   |   |  Configuration example This configuration sets up encrypted DNS using DNS-over-HTTPS. {     "Type": "com.apple.configuration.network.dns-settings",     "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",     "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",     "Payload": {         "VisibleName": "DNS Settings",         "DNSSettings": {             "DNSProtocol": "HTTPS",             "ServerURL": "https://dns.example.com/dns-query",             "ServerAddresses": [                 "12.12.12.12"             ],             "AllowFailover": false,             "SupplementalMatchDomains": [                 "example.com"             ]         }     } }

## Topics

### Objects

- [NetworkDNSSettingsDNSSettingsObject](devicemanagement/networkdnssettingsdnssettingsobject.md)
- [NetworkDNSSettingsOnDemandRulesElementObject](devicemanagement/networkdnssettingsondemandruleselementobject.md)

## See Also

### Configurations

- [AccessibilitySettings](devicemanagement/accessibilitysettings.md)
- [AccountCalDAV](devicemanagement/accountcaldav.md)
- [AccountCardDAV](devicemanagement/accountcarddav.md)
- [AccountExchange](devicemanagement/accountexchange.md)
- [AccountGoogle](devicemanagement/accountgoogle.md)
- [AccountLDAP](devicemanagement/accountldap.md)
- [AccountMail](devicemanagement/accountmail.md)
- [AccountSettings](devicemanagement/accountsettings.md)
- [AccountSubscribedCalendar](devicemanagement/accountsubscribedcalendar.md)
- [AppManaged](devicemanagement/appmanaged.md)
- [AppSettings](devicemanagement/appsettings.md)
- [AudioAccessorySettings](devicemanagement/audioaccessorysettings.md)
- [ContentCaching](devicemanagement/contentcaching.md)
- [DiskManagementSettings](devicemanagement/diskmanagementsettings.md)
- [ExtensibleSSO](devicemanagement/extensiblesso.md)