How to Enforce Strict or Safe Search Settings with Webroot DNS Protection
Add a new CNAME record on your local DNS server for your local Google domain(s) pointing to forcesafesearch.google.com. For this example, we will be using www.google.com. Create a CNAME record for www.google.com that points to forcesafesearch.google.com.
Clear your DNS cache of the saved www.google.com record.
Make a new search and you should be prompted that SafeSearch is enabled. As long as this CNAME record is in place, SafeSearch will be enforced on the network.
An example configuration on Windows Server 2012 can be seen below for the A-Record equivalent. For the CNAME, create a CNAME record pointing www.google.com to forcesafesearch.google.com.
You may need to add a www.google.com zone and provide an A record override for www.google.com to 220.127.116.11 (forcesafesearch.google.com) depending on your DNS server setup.
That's it. Your network is now configured to enforce SafeSearch for all computers utilizing your local DNS server. To confirm it's active, the first time you visit google.com, a message will appear on the top of the screen confirming SafeSearch is force enabled.
Using a Hosts file? Edit in the below line:
18.104.22.168 www.google.com #forcesafesearch
To confirm it is working, look for the banner shown on the below image.
And SafeSearch will be enforced for adult content that is filtered by Google Search.