Want to protect a Windows 11 device from harmful online content? You're in the right place! This guide will efficiently walk you through how to do so.

1. Change important user account settings

First off, we need to ensure that the Windows user account your child uses will have only standard-level permissions on this device. This means that, once we've finished setting up protection, they will not be able to remove the filter installation without the password of a device administrator (being you). We will briefly go through the steps to make a new administrator account, then we will set the account your child uses to have standard permissions. Let's get started by clicking the Start Menu button on the taskbar.



Click the "All apps" button at the upper-right corner of the Start Menu panel that comes up.



Scroll down to the Settings app listing, then click it.



Click the "Accounts" menu in the sidebar. Click the "Family & other users" submenu. Under the "Other users" section, click the "Add account" button.



Click "I don't have this person's sign-in information" inside the window that comes up.



Click "Add a user without a Microsoft account".



Fill in the fields as seen below. Make sure to use a memorable password that only you know. Click the "Next" button.



Great work! We now need to give administrative permissions to the account we just created. Click the account belonging to "Admin", then click the "Change account type" button.



Click the "Administrator" option, then click the "OK" button.



Sign out of the account your child uses by clicking the Start Menu button > user icon (at the lower-left corner) > Sign out.

Sign in to the new "Admin" account. Click the Start Menu button > All apps > Settings > Accounts > Family & other users. Click the account your child uses, then click the "Change account type" button.



Click the "Standard User" option, then click the "OK" button.



You can now close the Settings app.

2. Install system-wide protection

Click the Start Menu button and type "cmd". Click the "Run as administrator" option in the sidebar.



Copy all of the following text:

netsh dns add encryption server=35.227.226.142 dohtemplate=""

Paste this text in Command Prompt by right-clicking anywhere inside the window once. Make sure that you don't execute the command just yet, as we still need to prepare a protection link for this device.



Click this link to visit the Safe Surfer dashboard so that we can create a new "Advanced" (that is, custom) device listing. Give it a name, then click the "Accept" button.



The dashboard will present you with a pair of links for this custom device. Click the Copy button next to the DoH (DNS over HTTPS) link.



If you accidentally moved past the page with the pair of links, simply click the "My Devices" menu in the sidebar and select the "Connect" button inside the applicable device listing.



Go back to the Command Prompt window. As shown below, use the arrow keys on your keyboard to bring the terminal cursor underneath the second speech mark.



Right-click inside the Command Prompt window to paste the protection link. It should look similar to what is shown below (note the example link with the "device_id_here" text). Press the Enter key on your keyboard to execute the command.



You can now close the Command Prompt window.

This Windows 11 device will feature Ethernet and/or Wi-Fi capabilities to connect to the Internet. We have detailed the next step of installation for both hardware options below. You should install protection for each option if both are present.

Click the Start Menu button > All apps > Settings. Click the "Network & internet" menu in the sidebar.

Ethernet

Click the "Ethernet" submenu. Click the "Edit" button inside the "DNS server assignment" section.



Fill in the fields as shown below, then click the "Save" button.



Wi-Fi

Go back to the "Network & internet" menu if you installed protection in the Ethernet submenu.

Click the "Wi-Fi" submenu, then click the "Hardware properties" submenu found inside. Click the "Edit" button inside the "DNS server assignment" section.



Fill in the fields as shown below, then click the "Save" button.



You can now close the Settings app.

3. Finalise protection

If you would like to configure blocked sites for this device, visit the Safe Surfer dashboard again by clicking this link. Click the "Block Sites" menu in the sidebar. Click the blue bubble found in the middle of the menu, then select the applicable Windows 11 device. Toggle on the "Override defaults" switch. You can now browse through our list of categories and select ones that you wish to block. Click the "Save" button at the upper-right of the page once you're done. You might like to restart the device if you wish to immediately apply any filter changes that you may have made. These changes would otherwise take approximately 5–10 minutes to be made effective.

Verify that the filter installation is working by visiting ExampleAdultSite.com. This is a safe website designated for testing if pornographic sites are being blocked. This site should be blocked.



If you didn't restart the device earlier, you can now sign out of the "Admin" user by clicking the Start Menu button > user icon (at the lower-left corner) > Sign out.

Protection complete

Congratulations! This device is now fully protected. If you have any other Windows 11 devices that you would like to protect, simply start again from the top of this guide.

If you need to uninstall protection, simply switch the Ethernet and/or Wi-Fi DNS server assignment settings back to "Automatic" (rather than "Manual") mode. You can only make this change with a user account that holds administrative permissions.

If you would like to protect a different kind of device, view section 3 on our Protect My Devices article for more guides like this one.
Was this article helpful?
Cancel
Thank you!