Intune Firewall Proxy Requirements Modern Windows 10 Windows 11 Deployment

This post details the Intune Firewall Proxy Requirements for Modern Windows 10 or Windows 11 Deployment. I often hear that Windows Autopilot deployment fails because of external issues with Intune and Windows.

I recommend reviewing the following sections to ensure your proxy team has whitelisted all the required URLs. Microsoft updates this documentation for all Windows 10 versions.

Suppose you can add the following list of URLs (Windows 10 1903 enterprise version) into your proxy server whitelisting. In that case, you can eliminate ~60% of your Windows Autopilot, and Intune Enrollment Page issues will be resolved.

So one of the main reasons identified for common Windows deployment failures is network connectivity requirements. The following are some of the Intune-related posts that would be helpful.

Sign up to get the best of How To Manage Devices straight to your inbox!

• Windows 11 Intune Enrollment Process
• Intune MEM Endpoint Analytics | Learn and Discover #1

More Microsoft documentation details are available in this post’s resources section.

Windows Update Related URLs

The following URLs should be opened to get Windows Update for Business to work on your corporate Windows 10 1903 devices. Windows updates related to Windows 10 or Windows 11 Proxy Requirements are in the below list.

Windows Settings URLs

Windows settings should have access to the following URLs per best practices. Windows Settings related to Windows 10 or Windows 11 Proxy Requirements are listed below.

Microsoft Office Update URLs

The following URLs should be accessed to get Microsoft Office updates on Windows 10 devices.

Windows Defender URLs

The following list of URLs should be opened or whitelisted on your proxy server to receive Windows Defender updates and manage policy.

Microsoft Store Access URLs

The following URLs should be accessible from Windows 10 devices to access the Microsoft Store.

OneDrive Access URLs

The following URLs should be acceptable for Windows 10 devices to access OneDrive. OneDrive related Windows 10 Proxy Requirements are in the below list.

Device Authentication URLs

The following URLs should be accessible from Windows 10 devices to authenticate. They should also be part of proxy whitelisting to get the Windows 10 devices working properly.

Diagnostics Data URLs

The following URLs are required for sending the diagnostics data & telemetry data to Microsoft services. I would recommend opening up these ports or white listings these URLs in your corporate proxy.

Licensing Related URLs

The following URLs must be whitelisted in your cooperate proxy environment to get Microsoft licensing-related functionalities to work.

Azure Related Components

To get Azure-related apps working with Windows 10 1903, the following URLs must be whitelisted in your cooperate proxy environment. The Azure-related Windows 10 Proxy Requirements are in the list below.

Certificates Windows Update

The following URL must be whitelisted in your cooperate proxy environment to get the Windows update-related certificate working.

Location URLs for Windows

You should white list the following URLs to Windows location services to work.

Microsoft Account Access URLs

If you want to sign in with a Microsoft account to a Windows 10 1903 device, you should white-list URLs.

Windows Spotlight Related URLs

You might need to open the following URLs to make Windows Spotlight work on Windows 10 devices.

Skype Access URLs

You might need to access the following URLs to access Skype from a Windows 10 1903 device.

Windows Apps Related URLs

Windows 10 1903 applications require the following URL to be opened via your corporate proxy. The list of Windows Apps related to Windows 10 Proxy Requirements is below.

NOTE! – The following list is not mandatory.

URLs for Cortana and Search

The following URLs are for Cortana & search features working on Windows 10.

Maps Related URLs for Windows Devices

When you want access to update OFFLINE MAPS, you need to allow the following URLs.

Other URLs – Intune Firewall Proxy Requirements Modern Windows 10 Deployment

The following URLs are also should accessible from Windows 10 1903 devices.

Resources

• Connection endpoints for Windows 10 Enterprise, version 21H1
• Connection endpoints for Windows 11 Enterprise

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc