Just an FYI to anyone seeking to turn off WebRoot DNS Filtering:
My recent experience is that turning off DNS Filtering in the GSM does NOT remove the DNS Filtering agent from the client.
I had clients unable to surf due to DNS issues with after DNS Filtering was activated. De-activated DNS Filtering, issues continued. Found the DNS Filtering agent still installed on afftected clients, altering the DHCP DNS settings. Manually removed the agent.