Enable Update Security Level through command line

The following illustrates on how to enable "update security level" through command line

1. To Enable update security level with OnlySecure option run the following

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel /t REG_DWORD /d 256 /f







2. To enable it with OnlyUnsecure, run

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel /t REG_DWORD /d 16 /f






3. To enable it with UnsecureFollowedBySecure, run

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel /t REG_DWORD /d 0 /f







4. To set "update security level" to disabled or not configured, delete the registry key

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel