diff --git a/docs/dns-management.md b/docs/dns-management.md
index 4f10894..5528981 100644
--- a/docs/dns-management.md
+++ b/docs/dns-management.md
@@ -23,7 +23,11 @@ Each client must click the "Allow DNS" button.
 
 ### Windows Active Directory
 
-Some group policies can prevent managed DNS from working. See fix here [New DNS Features don't appear to work](https://discuss.zerotier.com/t/new-dns-features-dont-appear-to-work/982/7)
+Some group policies can prevent managed DNS from working.
+
+If your machines are all domain joined, you can push a `NRPT` rule via GPO. Go to Computer Config → Policies → Windows Settings → Name Resolution Policy.
+
+See here [New DNS Features don't appear to work](https://discuss.zerotier.com/t/new-dns-features-dont-appear-to-work/982/7) for more discussion.
 
 ### macOS DNS resolution
 
diff --git a/sidebars.js b/sidebars.js
index 92e8c58..7925f52 100644
--- a/sidebars.js
+++ b/sidebars.js
@@ -31,7 +31,7 @@ module.exports = {
         description: 'Our hosted offering for managing your networks.',
         slug: '/central',
       },
-      items: ['start', 'faq-central', 'sso', 'authentication', 'organizations', 'central-admins', 'audit-logs', 'pricing', 'central-billing', 'central-hide-nodes', 'sso-add-seats'],
+      items: ['start', 'faq-central', 'sso', 'authentication', 'organizations', 'central-admins', 'audit-logs', 'pricing', 'central-billing', 'central-hide-nodes', 'sso-add-seats', 'dns-management'],
     },
     {
       type: 'category',