From 84ad8b66ec709b54dfffb8a03a45a3f74bbdfbcb Mon Sep 17 00:00:00 2001 From: Brandon Kessler Date: Tue, 22 Sep 2026 16:48:04 -0600 Subject: [PATCH] FEATURE: Updates to match Adguard syntax --- microsoft-allowlist.txt | 258 ++++++++++++++++++---------------------- 1 file changed, 118 insertions(+), 140 deletions(-) diff --git a/microsoft-allowlist.txt b/microsoft-allowlist.txt index cda0b36..c17ec31 100644 --- a/microsoft-allowlist.txt +++ b/microsoft-allowlist.txt @@ -1,160 +1,138 @@ -#-------------------------------------------# -#-------- Microsoft Intune and EntraID -----# -#-------------------------------------------# -#-- Syntax https://adguard.com/kb/general/ad-filtering/create-own-filters/ -#-- As found at https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america -#-- All these are explicitly allowed as not to break Intune and EntraID functionality +!-------------------------------------------! +!-------- Microsoft Intune and EntraID -----! +!-------------------------------------------! +!-- Syntax https://adguard.com/kb/general/ad-filtering/create-own-filters/ +!-- As found at https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america +!-- All these are explicitly allowed as not to break Intune and EntraID functionality -#---- Intune client and host service -*.manage.microsoft.com -manage.microsoft.com -*.dm.microsoft.com -EnterpriseEnrollment.manage.microsoft.com +!---- Intune client and host service +@@||manage.microsoft.com^ +@@||dm.microsoft.com^ -#---- MDM Delivery Optimization -*.do.dsp.mp.microsoft.com -*.dl.delivery.mp.microsoft.com +!---- MDM Delivery Optimization +@@||do.dsp.mp.microsoft.com^ +@@||dl.delivery.mp.microsoft.com^ -#---- MEM - Win32Apps -swda01-mscdn.manage.microsoft.com -swda02-mscdn.manage.microsoft.com -swdb01-mscdn.manage.microsoft.com -swdb02-mscdn.manage.microsoft.com -swdc01-mscdn.manage.microsoft.com -swdc02-mscdn.manage.microsoft<.com -swdd01-mscdn.manage.microsoft.com -swdd02-mscdn.manage.microsoft.com -swdin01-mscdn.manage.microsoft.com -swdin02-mscdn.manage.microsoft.com -aam-content-cdn.manage.microsoft.com +!---- MEM - Win32Apps +@@||manage.microsoft.com^ -#---- Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account -account.live.com -login.live.com +!---- Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account +@@||account.live.com^ +@@||login.live.com^ -#---- Endpoint discovery -go.microsoft.com +!---- Endpoint discovery +@@||go.microsoft.com^ -#---- Dependency - Feature Deployment -config.edge.skype.com -ecs.office.com +!---- Dependency - Feature Deployment +@@||config.edge.skype.com^ +@@||ecs.office.com^ -#---- Organizational messages -fd.api.orgmsg.microsoft.com -ris.prod.api.personalization.ideas.microsoft.com +!---- Organizational messages +@@||fd.api.orgmsg.microsoft.com^ +@@||ris.prod.api.personalization.ideas.microsoft.com^ -#---- Authentication and Identity, includes Microsoft Entra ID and Entra ID related services. -login.microsoftonline.com -graph.windows.net +!---- Authentication and Identity, includes Microsoft Entra ID and Entra ID related services. +@@||login.microsoftonline.com^ +@@||graph.windows.net^ -#---- Office Customization Service provides Office 365 ProPlus deployment configuration, application settings, and cloud based policy management. -*.officeconfig.msocdn.com -config.office.com +!---- Office Customization Service provides Office 365 ProPlus deployment configuration, application settings, and cloud based policy management. +@@||officeconfig.msocdn.com^ +@@||config.office.com^ -#---- Identity supporting services & CDNs. -enterpriseregistration.windows.net -certauth.enterpriseregistration.windows.net +!---- Identity supporting services & CDNs. +@@||enterpriseregistration.windows.net^ +@@||certauth.enterpriseregistration.windows.net^ -#---- MEM - Android AOSP Dependency -intunecdnpeasd.manage.microsoft.com +!---- MEM - Android AOSP Dependency +@@||manage.microsoft.com^ -#---- MEM - WNS Dependencies -*.notify.windows.com -*.wns.windows.com -sinwns1011421.wns.windows.com -sin.notify.windows.com +!---- MEM - WNS Dependencies +@@||notify.windows.com^ +@@||wns.windows.com^ -#---- MEM - Remote Help Feature -*.support.services.microsoft.com -remoteassistance.support.services.microsoft.com -teams.microsoft.com -remoteassistanceprodacs.communication.azure.com -edge.skype.com -aadcdn.msftauth.net -aadcdn.msauth.net -alcdn.msauth.net -wcpstatic.microsoft.com -*.aria.microsoft.com -browser.pipe.aria.microsoft.com -*.events.data.microsoft.com -v10c.events.data.microsoft.com -*.monitor.azure.com -js.monitor.azure.com -edge.microsoft.com -*.trouter.communication.microsoft.com -*.trouter.teams.microsoft.com -*.trouter.communications.svc.cloud.microsoft -go-amer.trouter.communications.svc.cloud.microsoft -api.flightproxy.skype.com -ecs.communication.microsoft.com -remotehelp.microsoft.com -remoteassistanceprodacseu.communication.azure.com +!---- MEM - Remote Help Feature +@@||support.services.microsoft.com^ +@@||teams.microsoft.com^ +@@||remoteassistanceprodacs.communication.azure.com^ +@@||edge.skype.com^ +@@||aadcdn.msftauth.net^ +@@||aadcdn.msauth.net^ +@@||alcdn.msauth.net^ +@@||wcpstatic.microsoft.com^ +@@||aria.microsoft.com^ +@@||events.data.microsoft.com^ +@@||monitor.azure.com^ +@@||edge.microsoft.com^ +@@||trouter.communication.microsoft.com^ +@@||trouter.teams.microsoft.com^ +@@||trouter.communications.svc.cloud.microsoft^ +@@||api.flightproxy.skype.com^ +@@||ecs.communication.microsoft.com^ +@@||remotehelp.microsoft.com^ +@@||remoteassistanceprodacseu.communication.azure.com^ -#---- Dependency - Remote Help web pubsub -*.webpubsub.azure.com -AMSUA0101-RemoteAssistService-pubsub.webpubsub.azure.com +!---- Dependency - Remote Help web pubsub +@@||webpubsub.azure.com^ -#---- Remote Help Dependency for GCC customers -remoteassistanceweb-gcc.usgov.communication.azure.us -gcc.remotehelp.microsoft.com -gcc.relay.remotehelp.microsoft.com -*.gov.teams.microsoft.us +!---- Remote Help Dependency for GCC customers +@@||remoteassistanceweb-gcc.usgov.communication.azure.us^ +@@||gcc.remotehelp.microsoft.com^ +@@||gcc.relay.remotehelp.microsoft.com^ +@@||gov.teams.microsoft.us^ -#---- Windows Autopilot - Windows Update -*.windowsupdate.com -*.dl.delivery.mp.microsoft.com -*.prod.do.dsp.mp.microsoft.com -*.delivery.mp.microsoft.com -*.update.microsoft.com -tsfe.trafficshaping.dsp.mp.microsoft.com -adl.windows.com +!---- Windows Autopilot - Windows Update +@@||windowsupdate.com^ +@@||prod.do.dsp.mp.microsoft.com^ +@@||delivery.mp.microsoft.com^ +@@||update.microsoft.com^ +@@||tsfe.trafficshaping.dsp.mp.microsoft.com^ +@@||adl.windows.com^ -#---- Windows Autopilot - NTP Sync -time.windows.com +!---- Windows Autopilot - NTP Sync +@@||time.windows.com^ -#---- Windows Autopilot - WNS Dependencies -clientconfig.passport.net -windowsphone.com -*.s-microsoft.com -c.s-microsoft.com +!---- Windows Autopilot - WNS Dependencies +@@||clientconfig.passport.net^ +@@||windowsphone.com^ +@@||s-microsoft.com^ -#---- Windows Autopilot - Third-party deployment dependencies -ekop.intel.com -ekcert.spserv.microsoft.com -ftpm.amd.com +!---- Windows Autopilot - Third-party deployment dependencies +@@||ekop.intel.com^ +@@||ekcert.spserv.microsoft.com^ +@@||ftpm.amd.com^ -#---- Windows Autopilot - Diagnostics upload -amsua0101lmsas.blob.core.windows.net -amsua0102lmsas.blob.core.windows.net -amsua0201lmsas.blob.core.windows.net -amsua0202lmsas.blob.core.windows.net -amsua0401lmsas.blob.core.windows.net -amsua0402lmsas.blob.core.windows.net -amsua0501lmsas.blob.core.windows.net -amsua0502lmsas.blob.core.windows.net -amsua0601lmsas.blob.core.windows.net -amsua0602lmsas.blob.core.windows.net -amsua0701lmsas.blob.core.windows.net -amsua0702lmsas.blob.core.windows.net -amsua0801lmsas.blob.core.windows.net -amsua0901lmsas.blob.core.windows.net -amsua0902lmsas.blob.core.windows.net -amsub0101lmsas.blob.core.windows.net -amsub0102lmsas.blob.core.windows.net -amsub0201lmsas.blob.core.windows.net -amsub0202lmsas.blob.core.windows.net -amsub0301lmsas.blob.core.windows.net -amsub0302lmsas.blob.core.windows.net -amsub0501lmsas.blob.core.windows.net -amsub0502lmsas.blob.core.windows.net -amsub0601lmsas.blob.core.windows.net -amsub0701lmsas.blob.core.windows.net -amsub0801lmsas.blob.core.windows.net -amsub0901lmsas.blob.core.windows.net -amsuc0101lmsas.blob.core.windows.net -amsuc0201lmsas.blob.core.windows.net -amsuc0301lmsas.blob.core.windows.net -amsuc0501lmsas.blob.core.windows.net -amsuc0601lmsas.blob.core.windows.net -amsud0101lmsas.blob.core.windows.net -amsuin01lmsas.blob.core.windows.net +!---- Windows Autopilot - Diagnostics upload +@@||amsua0101lmsas.blob.core.windows.net^ +@@||amsua0102lmsas.blob.core.windows.net^ +@@||amsua0201lmsas.blob.core.windows.net^ +@@||amsua0202lmsas.blob.core.windows.net^ +@@||amsua0401lmsas.blob.core.windows.net^ +@@||amsua0402lmsas.blob.core.windows.net^ +@@||amsua0501lmsas.blob.core.windows.net^ +@@||amsua0502lmsas.blob.core.windows.net^ +@@||amsua0601lmsas.blob.core.windows.net^ +@@||amsua0602lmsas.blob.core.windows.net^ +@@||amsua0701lmsas.blob.core.windows.net^ +@@||amsua0702lmsas.blob.core.windows.net^ +@@||amsua0801lmsas.blob.core.windows.net^ +@@||amsua0901lmsas.blob.core.windows.net^ +@@||amsua0902lmsas.blob.core.windows.net^ +@@||amsub0101lmsas.blob.core.windows.net^ +@@||amsub0102lmsas.blob.core.windows.net^ +@@||amsub0201lmsas.blob.core.windows.net^ +@@||amsub0202lmsas.blob.core.windows.net^ +@@||amsub0301lmsas.blob.core.windows.net^ +@@||amsub0302lmsas.blob.core.windows.net^ +@@||amsub0501lmsas.blob.core.windows.net^ +@@||amsub0502lmsas.blob.core.windows.net^ +@@||amsub0601lmsas.blob.core.windows.net^ +@@||amsub0701lmsas.blob.core.windows.net^ +@@||amsub0801lmsas.blob.core.windows.net^ +@@||amsub0901lmsas.blob.core.windows.net^ +@@||amsuc0101lmsas.blob.core.windows.net^ +@@||amsuc0201lmsas.blob.core.windows.net^ +@@||amsuc0301lmsas.blob.core.windows.net^ +@@||amsuc0501lmsas.blob.core.windows.net^ +@@||amsuc0601lmsas.blob.core.windows.net^ +@@||amsud0101lmsas.blob.core.windows.net^ +@@||amsuin01lmsas.blob.core.windows.net^