mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-07 18:17:22 +00:00
Merge pull request #10893 from MicrosoftDocs/danbrown-privacy-freshness
Freshness updates to Windows privacy articles (endpoints)
This commit is contained in:
Dan Brown
GitHub
commit
db1a3ad41b
@ -7,8 +7,9 @@ ms.localizationpriority: high
|
||||
author: DHB-MSFT
|
||||
ms.author: danbrown
|
||||
manager: dansimp
|
||||
ms.date: 06/13/2024
|
||||
ms.date: 05/23/2025
|
||||
ms.topic: reference
|
||||
hideEdit: true
|
||||
ms.collection:
|
||||
- privacy-windows
|
||||
- must-keep
|
||||
@ -80,7 +81,7 @@ Although enterprise admins can turn off most essential services, we recommend, w
|
||||
|
||||
Windows ships with Microsoft Edge on Windows devices. Microsoft Edge is the default browser and is recommended for the best web browsing experience.
|
||||
|
||||
You can find details on all of Microsoft Edge's connected experiences and essential services [here](/microsoft-edge/privacy-whitepaper). To turn off specific Microsoft Edge features, see [Microsoft Edge](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge).
|
||||
You can find details on all of Microsoft Edge's connected experiences and essential services in the [Microsoft Edge Privacy Whitepaper](/microsoft-edge/privacy-whitepaper). To turn off specific Microsoft Edge features, see [Microsoft Edge](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge).
|
||||
|
||||
## IE essential services and connected experiences
|
||||
|
||||
@ -105,8 +106,8 @@ Internet Explorer shares many of the Windows essential services listed above. Th
|
||||
## Related articles
|
||||
|
||||
- [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
|
||||
- [Connected experiences in Office](/deployoffice/privacy/connected-experiences)
|
||||
- [Essential services for Office](/deployoffice/privacy/essential-services)
|
||||
- [Connected experiences in Office](/microsoft-365-apps/privacy/connected-experiences)
|
||||
- [Essential services for Office](/microsoft-365-apps/privacy/essential-services)
|
||||
|
||||
To view endpoints for Windows Enterprise, see:
|
||||
|
||||
|
||||
@ -7,8 +7,9 @@ ms.localizationpriority: high
|
||||
author: DHB-MSFT
|
||||
ms.author: danbrown
|
||||
manager: dansimp
|
||||
ms.date: 10/06/2023
|
||||
ms.date: 05/23/2025
|
||||
ms.topic: reference
|
||||
hideEdit: true
|
||||
ms.collection:
|
||||
- privacy-windows
|
||||
- must-keep
|
||||
@ -185,4 +186,4 @@ To view endpoints for non-Enterprise Windows 11 editions, see [Windows 11 connec
|
||||
## Related links
|
||||
|
||||
- [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges)
|
||||
- [Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints)
|
||||
- [Network endpoints for Microsoft Intune](/intune/intune-service/fundamentals/intune-endpoints)
|
||||
|
||||
@ -7,8 +7,9 @@ ms.localizationpriority: high
|
||||
author: DHB-MSFT
|
||||
ms.author: danbrown
|
||||
manager: dansimp
|
||||
ms.date: 01/18/2018
|
||||
ms.date: 05/23/2025
|
||||
ms.topic: reference
|
||||
hideEdit: true
|
||||
ms.collection:
|
||||
- privacy-windows
|
||||
- must-keep
|
||||
@ -39,7 +40,7 @@ We used the following methodology to derive these network endpoints:
|
||||
3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.
|
||||
4. Compile reports on traffic going to public IP addresses.
|
||||
5. The test virtual machine was logged in using a local account and wasn't joined to a domain or Azure Active Directory.
|
||||
6. All traffic was captured in our lab using an IPV4 network. Therefore no IPV6 traffic is reported here.
|
||||
6. All traffic was captured in our lab using an IPV4 network. Therefore no IPV6 traffic is reported here.
|
||||
|
||||
> [!NOTE]
|
||||
> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time.
|
||||
@ -313,7 +314,7 @@ If you [turn off traffic for this endpoint](manage-connections-from-windows-oper
|
||||
|
||||
## Office
|
||||
|
||||
The following endpoints are used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity).
|
||||
The following endpoints are used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges).
|
||||
You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps.
|
||||
If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.
|
||||
|
||||
@ -327,7 +328,7 @@ If you turn off traffic for these endpoints, users won't be able to save documen
|
||||
| | HTTPS | `nexusrules.officeapps.live.com` |
|
||||
| | HTTPS | `officeclient.microsoft.com` |
|
||||
|
||||
The following endpoint is used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity).
|
||||
The following endpoint is used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges).
|
||||
You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps.
|
||||
If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.
|
||||
|
||||
@ -357,7 +358,7 @@ If you [turn off traffic for this endpoint](manage-connections-from-windows-oper
|
||||
|:--------------:|:--------:|:------------|
|
||||
| onedrive | HTTP \ HTTPS | `g.live.com/1rewlive5skydrive/ODSUProduction` |
|
||||
|
||||
The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US).
|
||||
The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges).
|
||||
To turn off traffic for this endpoint, uninstall OneDrive for Business. In this case, your device won't be able to get OneDrive for Business app updates.
|
||||
|
||||
| Source process | Protocol | Destination |
|
||||
@ -400,7 +401,7 @@ The following endpoint is used to retrieve Skype configuration values. To turn o
|
||||
## Windows Defender
|
||||
|
||||
The following endpoint is used for Windows Defender when Cloud-based Protection is enabled.
|
||||
If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device won't use Cloud-based Protection. For a detailed list of Microsoft Defender Antivirus cloud service connections, see [Allow connections to the Microsoft Defender Antivirus cloud service](/microsoft-365/security/defender-endpoint/configure-network-connections-microsoft-defender-antivirus#allow-connections-to-the-microsoft-defender-antivirus-cloud-service).
|
||||
If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device won't use Cloud-based Protection. For a detailed list of Microsoft Defender Antivirus cloud service connections, see [Allow connections to the Microsoft Defender Antivirus cloud service](/defender-endpoint/configure-network-connections-microsoft-defender-antivirus#allow-connections-to-the-microsoft-defender-antivirus-cloud-service).
|
||||
|
||||
| Source process | Protocol | Destination |
|
||||
|:--------------:|:--------:|:------------|
|
||||
@ -492,5 +493,5 @@ To view endpoints for other versions of Windows 10 Enterprise, see:
|
||||
|
||||
## Related links
|
||||
|
||||
- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US)
|
||||
- [Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints)
|
||||
- [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges)
|
||||
- [Network endpoints for Microsoft Intune](/intune/intune-service/fundamentals/intune-endpoints)
|
||||
|
||||
@ -7,8 +7,9 @@ ms.localizationpriority: high
|
||||
author: DHB-MSFT
|
||||
ms.author: danbrown
|
||||
manager: dansimp
|
||||
ms.date: 01/18/2018
|
||||
ms.date: 05/23/2025
|
||||
ms.topic: reference
|
||||
hideEdit: true
|
||||
ms.collection:
|
||||
- privacy-windows
|
||||
- must-keep
|
||||
@ -91,7 +92,7 @@ The following methodology was used to derive these network endpoints:
|
||||
||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com|
|
||||
|Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)|
|
||||
||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTPS|`www.msftconnecttest.com`|
|
||||
|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)|
|
||||
|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges). You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)|
|
||||
|||HTTPS|www.office.com|
|
||||
|||HTTPS|blobs.officehome.msocdn.com|
|
||||
|||HTTPS|officehomeblobs.blob.core.windows.net|
|
||||
@ -138,4 +139,4 @@ To view endpoints for other versions of Windows 10 Enterprise, see:
|
||||
## Related links
|
||||
|
||||
- [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges)
|
||||
- [Network infrastructure requirements for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints)
|
||||
- [Network endpoints for Microsoft Intune](/intune/intune-service/fundamentals/intune-endpoints)
|
||||
|
||||
@ -7,8 +7,9 @@ ms.localizationpriority: high
|
||||
author: DHB-MSFT
|
||||
ms.author: danbrown
|
||||
manager: dansimp
|
||||
ms.date: 10/06/2023
|
||||
ms.date: 05/23/2025
|
||||
ms.topic: reference
|
||||
hideEdit: true
|
||||
ms.collection:
|
||||
- privacy-windows
|
||||
- must-keep
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user