NsUpkeep (Nameserver Upkeep) is a small executable (~400 kB) that will assist with enforcing DNS server settings. If DNS servers are changed manually while it's running, it will keep changing them back again unless the process is killed, so mostly useful for enforcing children and non-advanced users. Putting this file into appdata/local and setting it up for automatic startup should help and protect most basic users aren't too aware of how processes and networks operate, to have a safer online experience when used with a good DNS filtering service. Especially those who aren't able to be placed behind network-based firewall filtering due to frequent movement to other networks (home, school, work, trips, etc).
Install as a scheduled startup task (elevated CMD):
(Creates a scheduled task with administrator rights, with an added 5-min start delay for slow computers.)
nsupkeep.exe --boot-on-start 184.108.40.206 220.127.116.11
Run manually instead (elevated CMD):
(Will NOT run after next reboot.)
nsupkeep.exe --run 18.104.22.168 22.214.171.124
NsUpkeep.zip (SHA-1: 5981508153059b08c341a326e40bd7b3ee5adfbb)
Norton ConnectSafe, OpenDNS Family Shield, etc. are good services to use to prevent traffic to malware-, porn- and other potentially unwanted Internet sites. OpenDNS lets you configure your own sites and useful customization with their free Home solution.