An empty allowance and schedule leave PC access unrestricted. Pause or resume access for 15 minutes or one hour; the saved schedule resumes when the override expires.
FAMILY MANAGEMENT
Policy overview
Review discovered Windows users and manage their time and application rules.
POLICY WORKSPACE
Select a discovered user
Choose an identity from the list to review its current policy and edit rules.
WINDOWS IDENTITY
User
ACCESS RULES
Policy configuration
Pause or resume one discovered app for 15 minutes or one hour. Its saved schedule applies again when the override expires.
ENROLLED COMPUTERS
Local DNS certificate authorities
Create or regenerate a per-PC local DNS CA. The enrolled client picks up the request over validated HTTPS and reports the result.
A local DNS CA must be initialized on each PC before a trusted HTTPS block page can appear. Only that PC’s CA public root is added to its local Trusted Root store; private keys stay on-device. Web Access rules and DNS history are configured below.
PER-COMPUTER WEB ACCESS
DNS filtering and site activity
Each PC receives a signed local DNS policy and keeps its last valid copy while offline. Activity shows queried hostnames, not full URLs or page paths.
OPTIONAL IMPORT
AdGuard Home
Checking AdGuard import settings…
Automatic sync runs every 5 minutes when configured.DEVICE POLICY
DNS access settings
DNS QUERY HISTORY
Recently queried hostnames
Aggregated for the last 90 days. Counts and times are informational and may arrive later when a PC reconnects.
| Hostname | Queries | Last seen | Last action | Rule |
|---|---|---|---|---|
| Select an enrolled PC to load DNS activity. | ||||
REVIEW
Site access requests
Allow adds an exact allow rule to this PC’s policy. Dismiss records the decision without changing the policy.
Select an enrolled PC to load requests.
AdGuard credentials stay on the server. Only enabled lists, custom rules, supported active rewrites, and supported blocked-service rules are imported. Weekly service schedules use v2 DNS policies; update the client before deploying the server that sends them. Missing local time-zone settings or unrepresentable service rules fail the sync and preserve the last successful snapshot. The upstream copy action supports primary UDP/TCP IP addresses only. Filter-list hosts and redirects must resolve to public IP addresses. Web Access policies are per computer, not per user.