160 lines
4.7 KiB
Plaintext
160 lines
4.7 KiB
Plaintext
#-------------------------------------------#
|
|
#-------- Microsoft Intune and EntraID -----#
|
|
#-------------------------------------------#
|
|
#-- As found at https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america
|
|
#-- All these are explicitly allowed as not to break Intune and EntraID functionality
|
|
|
|
#---- Intune client and host service
|
|
*.manage.microsoft.com
|
|
manage.microsoft.com
|
|
*.dm.microsoft.com
|
|
EnterpriseEnrollment.manage.microsoft.com
|
|
|
|
#---- MDM Delivery Optimization
|
|
*.do.dsp.mp.microsoft.com
|
|
*.dl.delivery.mp.microsoft.com
|
|
|
|
#---- MEM - Win32Apps
|
|
swda01-mscdn.manage.microsoft.com
|
|
swda02-mscdn.manage.microsoft.com
|
|
swdb01-mscdn.manage.microsoft.com
|
|
swdb02-mscdn.manage.microsoft.com
|
|
swdc01-mscdn.manage.microsoft.com
|
|
swdc02-mscdn.manage.microsoft<.com
|
|
swdd01-mscdn.manage.microsoft.com
|
|
swdd02-mscdn.manage.microsoft.com
|
|
swdin01-mscdn.manage.microsoft.com
|
|
swdin02-mscdn.manage.microsoft.com
|
|
aam-content-cdn.manage.microsoft.com
|
|
|
|
#---- Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account
|
|
account.live.com
|
|
login.live.com
|
|
|
|
#---- Endpoint discovery
|
|
go.microsoft.com
|
|
|
|
#---- Dependency - Feature Deployment
|
|
config.edge.skype.com
|
|
ecs.office.com
|
|
|
|
#---- Organizational messages
|
|
fd.api.orgmsg.microsoft.com
|
|
ris.prod.api.personalization.ideas.microsoft.com
|
|
|
|
#---- Authentication and Identity, includes Microsoft Entra ID and Entra ID related services.
|
|
login.microsoftonline.com
|
|
graph.windows.net
|
|
|
|
#---- Office Customization Service provides Office 365 ProPlus deployment configuration, application settings, and cloud based policy management.
|
|
*.officeconfig.msocdn.com
|
|
config.office.com
|
|
|
|
#---- Identity supporting services & CDNs.
|
|
enterpriseregistration.windows.net
|
|
certauth.enterpriseregistration.windows.net
|
|
|
|
#---- MEM - Android AOSP Dependency
|
|
intunecdnpeasd.manage.microsoft.com
|
|
|
|
#---- MEM - WNS Dependencies
|
|
*.notify.windows.com
|
|
*.wns.windows.com
|
|
sinwns1011421.wns.windows.com
|
|
sin.notify.windows.com
|
|
|
|
#---- MEM - Remote Help Feature
|
|
*.support.services.microsoft.com
|
|
remoteassistance.support.services.microsoft.com
|
|
teams.microsoft.com
|
|
remoteassistanceprodacs.communication.azure.com
|
|
edge.skype.com
|
|
aadcdn.msftauth.net
|
|
aadcdn.msauth.net
|
|
alcdn.msauth.net
|
|
wcpstatic.microsoft.com
|
|
*.aria.microsoft.com
|
|
browser.pipe.aria.microsoft.com
|
|
*.events.data.microsoft.com
|
|
v10c.events.data.microsoft.com
|
|
*.monitor.azure.com
|
|
js.monitor.azure.com
|
|
edge.microsoft.com
|
|
*.trouter.communication.microsoft.com
|
|
*.trouter.teams.microsoft.com
|
|
*.trouter.communications.svc.cloud.microsoft
|
|
go-amer.trouter.communications.svc.cloud.microsoft
|
|
api.flightproxy.skype.com
|
|
ecs.communication.microsoft.com
|
|
remotehelp.microsoft.com
|
|
remoteassistanceprodacseu.communication.azure.com
|
|
|
|
#---- Dependency - Remote Help web pubsub
|
|
*.webpubsub.azure.com
|
|
AMSUA0101-RemoteAssistService-pubsub.webpubsub.azure.com
|
|
|
|
#---- Remote Help Dependency for GCC customers
|
|
remoteassistanceweb-gcc.usgov.communication.azure.us
|
|
gcc.remotehelp.microsoft.com
|
|
gcc.relay.remotehelp.microsoft.com
|
|
*.gov.teams.microsoft.us
|
|
|
|
#---- Windows Autopilot - Windows Update
|
|
*.windowsupdate.com
|
|
*.dl.delivery.mp.microsoft.com
|
|
*.prod.do.dsp.mp.microsoft.com
|
|
*.delivery.mp.microsoft.com
|
|
*.update.microsoft.com
|
|
tsfe.trafficshaping.dsp.mp.microsoft.com
|
|
adl.windows.com
|
|
|
|
#---- Windows Autopilot - NTP Sync
|
|
time.windows.com
|
|
|
|
#---- Windows Autopilot - WNS Dependencies
|
|
clientconfig.passport.net
|
|
windowsphone.com
|
|
*.s-microsoft.com
|
|
c.s-microsoft.com
|
|
|
|
#---- Windows Autopilot - Third-party deployment dependencies
|
|
ekop.intel.com
|
|
ekcert.spserv.microsoft.com
|
|
ftpm.amd.com
|
|
|
|
#---- Windows Autopilot - Diagnostics upload
|
|
amsua0101lmsas.blob.core.windows.net
|
|
amsua0102lmsas.blob.core.windows.net
|
|
amsua0201lmsas.blob.core.windows.net
|
|
amsua0202lmsas.blob.core.windows.net
|
|
amsua0401lmsas.blob.core.windows.net
|
|
amsua0402lmsas.blob.core.windows.net
|
|
amsua0501lmsas.blob.core.windows.net
|
|
amsua0502lmsas.blob.core.windows.net
|
|
amsua0601lmsas.blob.core.windows.net
|
|
amsua0602lmsas.blob.core.windows.net
|
|
amsua0701lmsas.blob.core.windows.net
|
|
amsua0702lmsas.blob.core.windows.net
|
|
amsua0801lmsas.blob.core.windows.net
|
|
amsua0901lmsas.blob.core.windows.net
|
|
amsua0902lmsas.blob.core.windows.net
|
|
amsub0101lmsas.blob.core.windows.net
|
|
amsub0102lmsas.blob.core.windows.net
|
|
amsub0201lmsas.blob.core.windows.net
|
|
amsub0202lmsas.blob.core.windows.net
|
|
amsub0301lmsas.blob.core.windows.net
|
|
amsub0302lmsas.blob.core.windows.net
|
|
amsub0501lmsas.blob.core.windows.net
|
|
amsub0502lmsas.blob.core.windows.net
|
|
amsub0601lmsas.blob.core.windows.net
|
|
amsub0701lmsas.blob.core.windows.net
|
|
amsub0801lmsas.blob.core.windows.net
|
|
amsub0901lmsas.blob.core.windows.net
|
|
amsuc0101lmsas.blob.core.windows.net
|
|
amsuc0201lmsas.blob.core.windows.net
|
|
amsuc0301lmsas.blob.core.windows.net
|
|
amsuc0501lmsas.blob.core.windows.net
|
|
amsuc0601lmsas.blob.core.windows.net
|
|
amsud0101lmsas.blob.core.windows.net
|
|
amsuin01lmsas.blob.core.windows.net
|