diff --git a/microsoft-allowlist.txt b/microsoft-allowlist.txt index 93b2159..6d7b54a 100644 --- a/microsoft-allowlist.txt +++ b/microsoft-allowlist.txt @@ -2,7 +2,158 @@ #-------- Microsoft Intune and EntraID -----# #-------------------------------------------# #-- As found at https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america +#-- All these are explicitly allowed as not to break Intune and EntraID functionality + +#---- Intune client and host service *.manage.microsoft.com manage.microsoft.com *.dm.microsoft.com -EnterpriseEnrollment.manage.microsoft.com \ No newline at end of file +EnterpriseEnrollment.manage.microsoft.com + +#---- MDM Delivery Optimization +*.do.dsp.mp.microsoft.com +*.dl.delivery.mp.microsoft.com + +#---- MEM - Win32Apps +swda01-mscdn.manage.microsoft.com +swda02-mscdn.manage.microsoft.com +swdb01-mscdn.manage.microsoft.com +swdb02-mscdn.manage.microsoft.com +swdc01-mscdn.manage.microsoft.com +swdc02-mscdn.manage.microsoft<.com +swdd01-mscdn.manage.microsoft.com +swdd02-mscdn.manage.microsoft.com +swdin01-mscdn.manage.microsoft.com +swdin02-mscdn.manage.microsoft.com +aam-content-cdn.manage.microsoft.com + +#---- Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account +account.live.com +login.live.com + +#---- Endpoint discovery +go.microsoft.com + +#---- Dependency - Feature Deployment +config.edge.skype.com +ecs.office.com + +#---- Organizational messages +fd.api.orgmsg.microsoft.com +ris.prod.api.personalization.ideas.microsoft.com + +#---- Authentication and Identity, includes Microsoft Entra ID and Entra ID related services. +login.microsoftonline.com +graph.windows.net + +#---- Office Customization Service provides Office 365 ProPlus deployment configuration, application settings, and cloud based policy management. +*.officeconfig.msocdn.com +config.office.com + +#---- Identity supporting services & CDNs. +enterpriseregistration.windows.net +certauth.enterpriseregistration.windows.net + +#---- MEM - Android AOSP Dependency +intunecdnpeasd.manage.microsoft.com + +#---- MEM - WNS Dependencies +*.notify.windows.com +*.wns.windows.com +sinwns1011421.wns.windows.com +sin.notify.windows.com + +#---- MEM - Remote Help Feature +*.support.services.microsoft.com +remoteassistance.support.services.microsoft.com +teams.microsoft.com +remoteassistanceprodacs.communication.azure.com +edge.skype.com +aadcdn.msftauth.net +aadcdn.msauth.net +alcdn.msauth.net +wcpstatic.microsoft.com +*.aria.microsoft.com +browser.pipe.aria.microsoft.com +*.events.data.microsoft.com +v10c.events.data.microsoft.com +*.monitor.azure.com +js.monitor.azure.com +edge.microsoft.com +*.trouter.communication.microsoft.com +*.trouter.teams.microsoft.com +*.trouter.communications.svc.cloud.microsoft +go-amer.trouter.communications.svc.cloud.microsoft +api.flightproxy.skype.com +ecs.communication.microsoft.com +remotehelp.microsoft.com +remoteassistanceprodacseu.communication.azure.com + +#---- Dependency - Remote Help web pubsub +*.webpubsub.azure.com +AMSUA0101-RemoteAssistService-pubsub.webpubsub.azure.com + +#---- Remote Help Dependency for GCC customers +remoteassistanceweb-gcc.usgov.communication.azure.us +gcc.remotehelp.microsoft.com +gcc.relay.remotehelp.microsoft.com +*.gov.teams.microsoft.us + +#---- Windows Autopilot - Windows Update +*.windowsupdate.com +*.dl.delivery.mp.microsoft.com +*.prod.do.dsp.mp.microsoft.com +*.delivery.mp.microsoft.com +*.update.microsoft.com +tsfe.trafficshaping.dsp.mp.microsoft.com +adl.windows.com + +#---- Windows Autopilot - NTP Sync +time.windows.com + +#---- Windows Autopilot - WNS Dependencies +clientconfig.passport.net +windowsphone.com +*.s-microsoft.com +c.s-microsoft.com + +#---- Windows Autopilot - Third-party deployment dependencies +ekop.intel.com +ekcert.spserv.microsoft.com +ftpm.amd.com + +#---- Windows Autopilot - Diagnostics upload +amsua0101lmsas.blob.core.windows.net +amsua0102lmsas.blob.core.windows.net +amsua0201lmsas.blob.core.windows.net +amsua0202lmsas.blob.core.windows.net +amsua0401lmsas.blob.core.windows.net +amsua0402lmsas.blob.core.windows.net +amsua0501lmsas.blob.core.windows.net +amsua0502lmsas.blob.core.windows.net +amsua0601lmsas.blob.core.windows.net +amsua0602lmsas.blob.core.windows.net +amsua0701lmsas.blob.core.windows.net +amsua0702lmsas.blob.core.windows.net +amsua0801lmsas.blob.core.windows.net +amsua0901lmsas.blob.core.windows.net +amsua0902lmsas.blob.core.windows.net +amsub0101lmsas.blob.core.windows.net +amsub0102lmsas.blob.core.windows.net +amsub0201lmsas.blob.core.windows.net +amsub0202lmsas.blob.core.windows.net +amsub0301lmsas.blob.core.windows.net +amsub0302lmsas.blob.core.windows.net +amsub0501lmsas.blob.core.windows.net +amsub0502lmsas.blob.core.windows.net +amsub0601lmsas.blob.core.windows.net +amsub0701lmsas.blob.core.windows.net +amsub0801lmsas.blob.core.windows.net +amsub0901lmsas.blob.core.windows.net +amsuc0101lmsas.blob.core.windows.net +amsuc0201lmsas.blob.core.windows.net +amsuc0301lmsas.blob.core.windows.net +amsuc0501lmsas.blob.core.windows.net +amsuc0601lmsas.blob.core.windows.net +amsud0101lmsas.blob.core.windows.net +amsuin01lmsas.blob.core.windows.net