Windows 10 Proxy Requirements Modern Windows Deployment

0
Windows 10 Proxy Requirements

I heard many times that Windows Autopilot deployment fails because of external issues to Intune and Windows. So one of the main reasons identified for common Windows deployment failures is because of network requirements. In this post, you will get more details about the Windows 10 Proxy Requirements.

IntroductionWindows 10 Proxy Requirements

I would recommend going through the following sections to make sure your proxy team is whitelisted all the URLs required. Microsoft updates this documentation for all the Windows 10 versions.

If you can add the following list of URLs (Windows 10 1903 enterprise version) into your proxy server white-listing, then you can get rid of ~60% of your Windows Autopilot and Intune Enrollment Page issues will be resolved.

More details of Microsoft documentation are available in the resources section of this post.

Windows Update Related URLs

The following URLs should be opened to get Windows Update for Business to work on your corporate Windows 10 1903 devices. Windows updates related Windows 10 Proxy Requirements are in the below list.

AppsProtocolsDestination
Windows UpdateHTTPS*.prod.do.dsp.mp.microsoft.com
Windows UpdateHTTPcs9.wac.phicdn.net
Windows UpdateHTTPemdl.ws.microsoft.com
Windows UpdateHTTP*.dl.delivery.mp.microsoft.com
Windows UpdateHTTP.windowsupdate.com
Windows UpdateHTTPS*.delivery.mp.microsoft.com
Windows UpdateHTTPS*.update.microsoft.com
Windows UpdateHTTPStsfe.trafficshaping.dsp.mp.microsoft.com

Windows Settings URLs

Windows settings should have access to the following URLs as per the best practices. Windows Settings related Windows 10 Proxy Requirements are in the below list.

AppProtocolDestination
SettingsHTTPScy2.settings.data.microsoft.com.akadns.net
SettingsHTTPSsettings.data.microsoft.com
SettingsHTTPSsettings-win.data.microsoft.com

Microsoft Office Update URLs

The following list of URLs should be accessed to get Microsoft office updates on Windows 10 devices.

AppProtocolsDestination
OfficeHTTP*.c-msedge.net
OfficeHTTPS*.e-msedge.net
OfficeHTTPS*.s-msedge.net
OfficeHTTPSnexusrules.officeapps.live.com
OfficeHTTPSocos-office365-s2s.msedge.net
OfficeHTTPSofficeclient.microsoft.com
OfficeHTTPSoutlook.office365.com
OfficeHTTPSclient-office365-tas.msedge.net
OfficeHTTPSwww.office.com
OfficeHTTPSonecollector.cloudapp.aria
OfficeHTTPv10.events.data.microsoft.com/onecollector/1.0/
OfficeHTTPSself.events.data.microsoft.com
OfficeHTTPSto-do.microsoft.com

Windows Defender URLs

The following list of URLs should be opened or whitelisted on your proxy server to get Windows Defender updates and policy management.

AppProtocolsDestination
DefenderHTTPSwdcp.microsoft.com
DefenderHTTPSdefinitionupdates.microsoft.com
DefenderHTTPSgo.microsoft.com
DefenderHTTPS*smartscreen.microsoft.com
DefenderHTTPSsmartscreen-sn3p.smartscreen.microsoft.com
DefenderHTTPSunitedstates.smartscreen-prod.microsoft.com

Microsoft Store Access URLs

The following URLs should be accessible from Windows 10 device to get access to Microsoft Store.

AppProtocolDestination
Microsoft StoreHTTPS*.wns.windows.com
Microsoft StoreHTTPstorecatalogrevocation.storequality.microsoft.com
Microsoft StoreHTTPSimg-prod-cms-rt-microsoft-com*
Microsoft StoreHTTPSstore-images.microsoft.com
Microsoft StoreTLS v1.2.md.mp.microsoft.com
Microsoft StoreHTTPS*displaycatalog.mp.microsoft.com
Microsoft StoreHTTP \ HTTPSpti.store.microsoft.com
Microsoft StoreHTTPstoreedgefd.dsx.mp.microsoft.com
Microsoft StoreHTTPmarkets.books.microsoft.com
Microsoft StoreHTTPshare.microsoft.com

OneDrive Access URLs

The following URLs should be acceptable from Windows 10 device to get OneDrive access. OneDrive related Windows 10 Proxy Requirements are in the below list.

AppProtocolDestination
OneDriveHTTP \ HTTPSg.live.com/1rewlive5skydrive/*
OneDriveHTTPmsagfx.live.com
OneDriveHTTPSoneclient.sfx.ms

Device Authentication URLs

The following URLs should be accessible from Windows 10 device to get authenticated. The URLs should be part of proxy whitelisting to get the Windows 10 devices working properly.

AppProtocolDestination
Device authenticationHTTPSlogin.live.com*
Retrieve device metadataHTTPdmd.metaservices.microsoft.com

Diagnostics Data URLs

These following URLs are required for sending the diagnostics data & telemetry data to Microsoft services. I would recommend opening up these ports or white listings these URLs in your corporate proxy.

AppsProtocolDestination
TelemetryHTTPv10.events.data.microsoft.com
DiagnosticHTTPSv10.vortex-win.data.microsoft.com/collect/v1
DiagnosticHTTPwww.microsoft.com
TelemetryHTTPSco4.telecommand.telemetry.microsoft.com
DiagnosticHTTPcs11.wpc.v0cdn.net
DiagnosticHTTPScs1137.wpc.gammacdn.net
DiagnosticTLS v1.2modern.watson.data.microsoft.com*
TelemetryHTTPSwatson.telemetry.microsoft.com

Licensing Related URLs

The following URLs need to be white listed in your cooperate proxy environment to get Microsoft licensing related functionalities to work.

AppProtocolDestination
LicensingHTTPSlicensing.mp.microsoft.com

Azure Related Components

The following URLs need to be whitelisted in your cooperate proxy environment to get Azure related apps working with Windows 10 1903. Azure related Windows 10 Proxy Requirements are in the below list.

AppProtocolDestination
Azure Cloud AppHTTPSwd-prod-fe.cloudapp.azure.com
Traffic ManagerHTTPSris-prod-atm.trafficmanager.net
Traffic ManagerHTTPSvalidation-v2.sls.trafficmanager.net

Certificates Windows Update

The following URL needs to be white listed in your cooperate proxy environment to get Windows update related certificate working.

AppProtocolDestination
CertificatesHTTPctldl.windowsupdate.com

Location URLs for Windows

You should white list the following URLs to Windows location services to work.

AppProtocolDestination
LocationHTTPSinference.location.live.net
LocationHTTPlocation-inference-westus.cloudapp.net

Microsoft Account Access URLs

If you want sign in with Microsoft account to Windows 10 1903 device, you should white list URLs.

AppProtocolDestination
Microsoft AccountHTTPlogin.msa.akadns6.net
Microsoft AccountHTTPus.configsvc1.live.com.akadns.net

Windows Spotlight Related URLs

To make Windows spotlight work on Windows 10 device, you might need to open the following URLs.

AppProtocolDestination
Windows SpotlightTLS v1.2*.search.msn.com
Windows SpotlightHTTPSarc.msn.com
Windows SpotlightHTTPSg.msn.com*
Windows SpotlightHTTPSquery.prod.cms.rt.microsoft.com
Windows SpotlightHTTPSris.api.iris.microsoft.com

Skype Access URLs

You might need to access the following URLs to get access to Skype from Windows 10 1903 device.

AppProtocolDestination
SkypeHTTPSbrowser.pipe.aria.microsoft.com
SkypeHTTPconfig.edge.skype.com
SkypeHTTPs2s.config.skype.com
SkypeHTTPSskypeecs-prod-usw-0-b.cloudapp.net

Windows Apps Related URLs

Windows 10 1903 applications require the following URL should be opened via your corporate proxy. Windows Apps related Windows 10 Proxy Requirements are in the below list.

NOTE! – The following list is not mandatory.

AppProtocolDestination
WeatherHTTPblob.weather.microsoft.com
WeatherHTTPtile-service.weather.microsoft.com
OneNoteHTTPScdn.onenote.net/livetile/?Language=en-US
TwitterHTTPS.twimg.com
Candy CrushTLS v1.2candycrushsoda.king.com
Photo AppHTTPSevoke-windowsservices-tas.msedge.net
Wallet AppHTTPSwallet.microsoft.com
GrooveHTTPSmediaredirect.microsoft.com
WhiteboardHTTPSint.whiteboard.microsoft.com
WhiteboardHTTPSwbd.ms
WhiteboardHTTPSwhiteboard.microsoft.com
WhiteboardHTTP / HTTPSwhiteboard.ms

URLs for Cortana and Search

The following URLs are for cortana & search features working on Windows 10.

App ProtocolDestination
Cortana and SearchHTTPSstore-images.*microsoft.com
Cortana and SearchHTTPSwww.bing.com/client
Cortana and SearchHTTPSwww.bing.com
Cortana and SearchHTTPSwww.bing.com/proactive
Cortana and SearchHTTPSwww.bing.com/threshold/xls.aspx
Cortana and SearchHTTPexo-ring.msedge.net
Cortana and SearchHTTPfp.msedge.net
Cortana and SearchHTTPfp-vp.azureedge.net
Cortana and SearchHTTPodinvzc.azureedge.net
Cortana and SearchHTTPspo-ring.msedge.net
Windows 10 Proxy Requirements
Windows 10 Proxy Requirements

Maps Related URLs for Windows Devices

When you want to have access to update OFFLINE MAPS, then you need to allow the following URLs.

AppProtocolDestination
MapsHTTPS*g.akamaiedge.net
MapsHTTPmaps.windows.com

Other URLs

The following URLs are also should accessible from Windows 10 1903 devices.

AppProtocolsDestination
Microsoft EdgeHTTPSiecvlist.microsoft.com
Microsoft forward link redirection service (FWLink)HTTPSgo.microsoft.com
Network Connection Status Indicator (NCSI)HTTPwww.msftconnecttest.com*

Resources

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.