diff --git a/Windows/DoH/GPO-EnforceDoH.reg b/Windows/DoH/GPO-EnforceDoH.reg
new file mode 100644
index 00000000..e7f437c1
--- /dev/null
+++ b/Windows/DoH/GPO-EnforceDoH.reg
@@ -0,0 +1,4 @@
+Windows Registry Editor Version 5.00
+
+[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
+"DoHPolicy"=dword:00000003
diff --git a/Windows/DoH/README.md b/Windows/DoH/README.md
new file mode 100644
index 00000000..3b38fa39
--- /dev/null
+++ b/Windows/DoH/README.md
@@ -0,0 +1,7 @@
+# DNS over HTTPS in Windows 11
+
+Requires Windows 11.
+
+* `GPO-EnforceDoH.reg` enables the group policy to require DoH. However it
+  didn't seem to work for me or it allowed me to set the DNS server to not
+  use DoH.