#-------------------------------------------#
#-------- Microsoft Intune and EntraID -----#
#-------------------------------------------#
#-- Syntax https://adguard.com/kb/general/ad-filtering/create-own-filters/
#-- As found at https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america
#-- All these are explicitly allowed as not to break Intune and EntraID functionality

#---- Intune client and host service
*.manage.microsoft.com
manage.microsoft.com
*.dm.microsoft.com
EnterpriseEnrollment.manage.microsoft.com

#---- MDM Delivery Optimization
*.do.dsp.mp.microsoft.com
*.dl.delivery.mp.microsoft.com

#---- MEM - Win32Apps
swda01-mscdn.manage.microsoft.com
swda02-mscdn.manage.microsoft.com
swdb01-mscdn.manage.microsoft.com
swdb02-mscdn.manage.microsoft.com
swdc01-mscdn.manage.microsoft.com
swdc02-mscdn.manage.microsoft<.com
swdd01-mscdn.manage.microsoft.com
swdd02-mscdn.manage.microsoft.com
swdin01-mscdn.manage.microsoft.com
swdin02-mscdn.manage.microsoft.com
aam-content-cdn.manage.microsoft.com

#---- Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account
account.live.com
login.live.com

#---- Endpoint discovery
go.microsoft.com

#---- Dependency - Feature Deployment
config.edge.skype.com
ecs.office.com

#---- Organizational messages
fd.api.orgmsg.microsoft.com
ris.prod.api.personalization.ideas.microsoft.com

#---- Authentication and Identity, includes Microsoft Entra ID and Entra ID related services.
login.microsoftonline.com
graph.windows.net

#---- Office Customization Service provides Office 365 ProPlus deployment configuration, application settings, and cloud based policy management.
*.officeconfig.msocdn.com
config.office.com

#---- Identity supporting services & CDNs.
enterpriseregistration.windows.net
certauth.enterpriseregistration.windows.net

#---- MEM - Android AOSP Dependency
intunecdnpeasd.manage.microsoft.com

#---- MEM - WNS Dependencies
*.notify.windows.com
*.wns.windows.com
sinwns1011421.wns.windows.com
sin.notify.windows.com

#---- MEM - Remote Help Feature
*.support.services.microsoft.com
remoteassistance.support.services.microsoft.com
teams.microsoft.com
remoteassistanceprodacs.communication.azure.com
edge.skype.com
aadcdn.msftauth.net
aadcdn.msauth.net
alcdn.msauth.net
wcpstatic.microsoft.com
*.aria.microsoft.com
browser.pipe.aria.microsoft.com
*.events.data.microsoft.com
v10c.events.data.microsoft.com
*.monitor.azure.com
js.monitor.azure.com
edge.microsoft.com
*.trouter.communication.microsoft.com
*.trouter.teams.microsoft.com
*.trouter.communications.svc.cloud.microsoft
go-amer.trouter.communications.svc.cloud.microsoft
api.flightproxy.skype.com
ecs.communication.microsoft.com
remotehelp.microsoft.com
remoteassistanceprodacseu.communication.azure.com

#---- Dependency - Remote Help web pubsub
*.webpubsub.azure.com
AMSUA0101-RemoteAssistService-pubsub.webpubsub.azure.com

#---- Remote Help Dependency for GCC customers
remoteassistanceweb-gcc.usgov.communication.azure.us
gcc.remotehelp.microsoft.com
gcc.relay.remotehelp.microsoft.com
*.gov.teams.microsoft.us

#---- Windows Autopilot - Windows Update
*.windowsupdate.com
*.dl.delivery.mp.microsoft.com
*.prod.do.dsp.mp.microsoft.com
*.delivery.mp.microsoft.com
*.update.microsoft.com
tsfe.trafficshaping.dsp.mp.microsoft.com
adl.windows.com

#---- Windows Autopilot - NTP Sync
time.windows.com

#---- Windows Autopilot - WNS Dependencies
clientconfig.passport.net
windowsphone.com
*.s-microsoft.com
c.s-microsoft.com

#---- Windows Autopilot - Third-party deployment dependencies
ekop.intel.com
ekcert.spserv.microsoft.com
ftpm.amd.com

#---- Windows Autopilot - Diagnostics upload
amsua0101lmsas.blob.core.windows.net
amsua0102lmsas.blob.core.windows.net
amsua0201lmsas.blob.core.windows.net
amsua0202lmsas.blob.core.windows.net
amsua0401lmsas.blob.core.windows.net
amsua0402lmsas.blob.core.windows.net
amsua0501lmsas.blob.core.windows.net
amsua0502lmsas.blob.core.windows.net
amsua0601lmsas.blob.core.windows.net
amsua0602lmsas.blob.core.windows.net
amsua0701lmsas.blob.core.windows.net
amsua0702lmsas.blob.core.windows.net
amsua0801lmsas.blob.core.windows.net
amsua0901lmsas.blob.core.windows.net
amsua0902lmsas.blob.core.windows.net
amsub0101lmsas.blob.core.windows.net
amsub0102lmsas.blob.core.windows.net
amsub0201lmsas.blob.core.windows.net
amsub0202lmsas.blob.core.windows.net
amsub0301lmsas.blob.core.windows.net
amsub0302lmsas.blob.core.windows.net
amsub0501lmsas.blob.core.windows.net
amsub0502lmsas.blob.core.windows.net
amsub0601lmsas.blob.core.windows.net
amsub0701lmsas.blob.core.windows.net
amsub0801lmsas.blob.core.windows.net
amsub0901lmsas.blob.core.windows.net
amsuc0101lmsas.blob.core.windows.net
amsuc0201lmsas.blob.core.windows.net
amsuc0301lmsas.blob.core.windows.net
amsuc0501lmsas.blob.core.windows.net
amsuc0601lmsas.blob.core.windows.net
amsud0101lmsas.blob.core.windows.net
amsuin01lmsas.blob.core.windows.net