Want to protect a Windows 11 device from pornography and other harmful online content? You’re in the right place! This guide will efficiently walk you through how to do so with Safe Surfer.

Step 1: Change important user account settings

First off, we need to ensure that the Windows user account your child uses will have only standard-level permissions on this device. This means that once we’ve finished setting up protection they will not be able to remove the filter installation without the password of a device administrator (being you). We will briefly go through the steps to make a new administrator account, then we will set the account your child uses to have standard permissions.

Click the Start Menu button found on the taskbar.

 

 

 

At the upper right corner of the Start Menu panel, click the All apps button.

 

 

Scroll down to the Settings app listing, then click it.

 

 

On the sidebar, click the Accounts menu. Click the Family & other users submenu. Under the Other users section, click the Add account button.

 

 

On the window that comes up, click “I don’t have this person’s sign-in information”.

 

 

Click “Add a user without a Microsoft account”.

 

 

Fill in the fields as seen below. Make sure to use a memorable password that only you know. Click the Next button.

 

 

Great work! We now need to give administrative permissions to the account we just created. Click the Admin account listing, then click the Change account type button.

 

 

 

Under the account type section, select the Administrator option. Click the OK button.

 

 

Sign out of the account your child uses by clicking the Start Menu button > user icon (at the lower left corner) > Sign out.

Sign in to the new Admin account. Click the Start Menu button > All apps > Settings > Accounts > Family & other users. Click the account listing that belongs to your child, then click the Change account type button.

 

 

Under the account type section, click the Standard User option. Click the OK button.

 

 

You can now close the Settings app.

Step 2: Install protection

Click the Start Menu button and type “cmd”. On the right side of the panel, click the Run as administrator option.

 

 

Copy all of the following text:

netsh dns add encryption server=35.227.226.142 dohtemplate=""

Paste this text in Command Prompt by right-clicking anywhere inside the window once. Make sure that you don’t execute the command just yet, as we still need to prepare a protection link for this device.

 

 

Click this link to visit the Safe Surfer dashboard so that we can create a new Advanced (that is, custom) device listing. Enter a name for the listing, then click the Accept button.

 

 

The dashboard will present you with a pair of links for this custom device. Click the Copy button next to the DoH (DNS over HTTPS) link.

 

 

If you accidentally moved past the page holding the pair of links, simply click the My Devices menu in the sidebar and select the “Connect” button inside the applicable device listing.

 

 

Go back to the Command Prompt window. As shown below, use the arrow keys on your keyboard to bring the terminal cursor underneath the second speech mark.

 

 

Right-click inside the Command Prompt window to paste the protection link. It should look similar to what is shown below (note the example link with the “device_id_here” text). Press the Enter key on your keyboard to execute the command.

 

 

You can now close the Command Prompt window.

This Windows 11 device will feature Ethernet and/or Wi-Fi capabilities to connect to the Internet. We have detailed the next step of installation for both hardware options below. You should install protection for each option if both are present.

Click the Start Menu button > All apps > Settings. Click the Network & internet menu in the sidebar.

Enable for Ethernet

Click the Ethernet submenu. Click the Edit button inside the DNS server assignment section.

 

 

Fill in the fields as shown below, then click the Save button. You might need to enter your Admin user account credentials a couple of times. If a shield icon appears on the taskbar, click it and enter your credentials as before.

 

 

 

Enable for Wi-Fi

Go back to the Network & internet menu if you installed protection in the Ethernet submenu.

Click the Wi-Fi submenu, then click the Hardware properties submenu found inside. Click the Edit button inside the DNS server assignment section

 

 

Fill in the fields as shown below, then click the Save button. You might need to enter your Admin user account credentials a couple of times. If a shield icon appears on the taskbar, click it and enter your credentials as before.

 

 

You can now close the Settings app.

3. Finalise protection

If you would like to configure blocked sites for this device, visit the Safe Surfer dashboard again. Click the Block Sites menu on the sidebar. Click the blue bubble found in the middle of the menu, then select the applicable Windows 11 device. You can now browse through our list of categories and select ones that you wish to block. Click the Save button at the upper-right of the page once you’re done. You can now log out of the Safe Surfer dashboard.

You might like to restart the device if you wish to immediately apply any filter changes that you may have made. These changes would otherwise take approximately 5–10 minutes to be made effective.

Verify that the filter installation is working by visiting ExampleAdultSite.com. This is a safe website designated for testing if pornographic sites are being blocked. This site should be blocked.

 

 

If you didn’t restart the device earlier, you can now sign out of the Admin user by clicking the Start Menu button > user icon (at the lower-left corner) > Sign out.

Protection complete

Nice one—this device is now fully protected! To start monitoring protected devices, visit our easy-to-use online dashboard.

If you ever need to uninstall protection, simply switch the Ethernet and/or Wi-Fi DNS server assignment settings back to Automatic mode (rather than Manual mode). As previously demonstrated, these changes can only be made by user accounts that hold administrative permissions on this device.

If you have any other Windows 11 devices you would like to protect, simply start again from the top of this guide. If you would like to protect a different kind of device, visit our Guides page.